Activity

1. MaferMazu

   added this to RBAC AuthZ Boardon Jun 2, 2026
2. MaferMazu

   added a parent issue on Jun 2, 2026

   • Frontend: Implement Granular Permissions in Authoring UI (Course Editor/Auditor) #284
3. MaferMazu

   assigned

   bra-i-am

   on Jun 2, 2026
4. bra-i-am commented on Jun 4, 2026

   

   bra-i-am

   on Jun 4, 2026

   Last edited by BryanttV

   More actions

   Refinement

   https://www.figma.com/design/onU2END2OXaF7RRLWEHsZI/AuthZ---v2?node-id=9133-59237&t=OrmroEXprX0NyD7D-4

   Permission used:

   • courses.manage_pages_and_resources

   Already in src/authz/constants.ts as COURSE_PERMISSIONS.MANAGE_PAGES_AND_RESOURCES and in src/authz/permissionHelpers.ts as getPagesAndResourcesPermissions(courseId).

   Already fetched in pages-and-resources/PagesAndResources.tsx as canManagePagesAndResources; already used to compute isEditable and thread it into PagesAndResourcesContext.

   Role matrix:

   • Course Auditor (manage ❌)
   • Course Editor (manage ✅).

   PageSettingButton already reads isEditable from context. When !isEditable it currently renders a disabled arrow button instead of hiding it; the gear icon also still renders. Pattern: context (isEditable already resolved at the top — equivalent to prop pattern).

   ---

   UI location 1 — Pages & Resources: hide settings icon in each card for Course Auditor

   File: pages-and-resources/pages/PageSettingButton.jsx

   pages-and-resources/pages/PageSettingButton.jsx — return null when !isEditable (replaces the disabled-button branch and hides the gear). Placed after all hook calls to satisfy Rules of Hooks:

     const canConfigureOrEnable = allowedOperations?.configure || allowedOperations?.enable;
   
     if (!isEditable) {
       return null;
     }
   
     if (determineLinkDestination) {

   ---

   Testing implementation at https://github.com/eduNEXT/frontend-app-authoring/tree/bc/improve-pages-and-resources-permissions

   Can view

   

   Can manage

   
5. BryanttV

   moved this to Ready for Development in RBAC AuthZ Boardon Aug 4, 2026
6. BryanttV

   assigned

   dcoa

   ,

   mariajgrimaldi

   and

   jacobo-dominguez-wgu

   and unassigned

   bra-i-am

   ,

   dcoa

   and

   mariajgrimaldi

   on Aug 4, 2026
7. dcoa

   moved this from Ready for Development to Ready for Review in RBAC AuthZ Boardon Aug 13, 2026
8. bradenmacdonald

   closed this as completedin frontend-app-authoring#3195on Aug 24, 2026
9. github-project-automation

   moved this from Ready for Review to Done in RBAC AuthZ Boardon Aug 24, 2026