Activity

1. MaferMazu

   added this to RBAC AuthZ Boardon Jun 2, 2026
2. MaferMazu

   added a parent issue on Jun 2, 2026

   • Frontend: Implement Granular Permissions in Authoring UI (Course Editor/Auditor) #284
3. MaferMazu

   assigned

   bra-i-am

   on Jun 2, 2026
4. bra-i-am commented on Jun 4, 2026

   

   bra-i-am

   on Jun 4, 2026

   Last edited by bra-i-am

   More actions

   Refinement

   https://www.figma.com/design/onU2END2OXaF7RRLWEHsZI/AuthZ---v2?node-id=9141-5701&t=YfVqHIHjz2peZgpH-0

   Permission used: courses.manage_course_updates / courses.view_course_updates.
   Pattern: same useCourseUserPermissions hook — already resolved in CourseUpdates.tsx as canViewCourseUpdates and canManageCourseUpdates.

   ---

   UI location 1 — Course Updates page (view-only banner + hidden empty-state button for Course Auditor)

   Files: course-updates/messages.ts → course-updates/CourseUpdates.tsx

   course-updates/messages.ts — add view-only alert message:

     viewOnlyAlert: {
       id: 'course-authoring.course-updates.alert.view-only',
       defaultMessage: 'You have view-only access to this page. Contact your organization admin to request permissions.',
       description: 'Alert shown to users who can view but cannot manage course updates',
     },

   course-updates/CourseUpdates.tsx — add Alert to paragon imports, add Lock icon, show view-only banner between SubHeader and the updates section, and gate the empty-state button:

   // paragon import — add Alert
   import {
     ActionRow,
     Alert,
     Button,
     Container,
     Layout,
   } from '@openedx/paragon';
   
   // icons import — add Lock
   import { Add as AddIcon, ErrorOutline as ErrorIcon, Lock as LockIcon } from '@openedx/paragon/icons';
   
   ...
   
                 <SubHeader ... />
                 {canViewCourseUpdates && !canManageCourseUpdates && (
                   <Alert variant="info" icon={LockIcon}>
                     {intl.formatMessage(messages.viewOnlyAlert)}
                   </Alert>
                 )}
                 <section className="updates-section">
   
   ...
   
                       {!courseUpdates.length && (
                         <ActionRow>
                           <ActionRow.Spacer />
                           <span className="small mr-2">
                             {intl.formatMessage(messages.noCourseUpdates)}
                           </span>
                           {canManageCourseUpdates && (
                             <Button
                               variant="primary"
                               iconBefore={AddIcon}
                               size="sm"
                               onClick={() => handleOpenUpdateForm(REQUEST_TYPES.add_new_update)}
                               disabled={isUpdateFormOpen || errors.loadingUpdates}
                             >
                               {intl.formatMessage(messages.firstUpdateButton)}
                             </Button>
                           )}
                           <ActionRow.Spacer />
                         </ActionRow>
                       )}

   ---

   Testing implementation at https://github.com/eduNEXT/frontend-app-authoring/tree/bc/change-course-update-view

   

   ❤️React with ❤️1Reacted by María Fernanda Magallanes
5. bra-i-am

   moved this to Ready for Development in RBAC AuthZ Boardon Jun 4, 2026
6. BryanttV

   assigned

   dcoa

   and unassigned

   bra-i-am

   on Aug 4, 2026
7. dcoa

   moved this from Ready for Development to In Progress in RBAC AuthZ Boardon Aug 7, 2026
8. dcoa commented on Aug 10, 2026

   

   dcoa

   on Aug 10, 2026

   Contributor

   More actions

   Most of the implementation has been done previously. I am going to open a same PR for those that have the View Only Alert including this one.
9. dcoa

   moved this from In Progress to Ready for Review in RBAC AuthZ Boardon Aug 10, 2026
10. bradenmacdonald

    closed this as completedin frontend-app-authoring#3193on Aug 24, 2026
11. github-project-automation

    moved this from Ready for Review to Done in RBAC AuthZ Boardon Aug 24, 2026