Task - implement course team & groups #323

Activity

1. MaferMazu

   added a parent issue on Jun 2, 2026

   • Frontend: Implement Granular Permissions in Authoring UI (Course Editor/Auditor) #284
2. MaferMazu

   added this to RBAC AuthZ Boardon Jun 2, 2026
3. MaferMazu

   changed the title [-]Task - implement course updates[/-] [+]Task - implement course teams[/+] on Jun 2, 2026
4. MaferMazu

   moved this to In Grooming in RBAC AuthZ Boardon Jun 2, 2026
5. MaferMazu

   marked this as blocked on Jun 2, 2026

   • Design: Course Editor & Course Auditor screen restrictions #283
6. BryanttV

   unmarked this as blocked on Aug 4, 2026

   • Design: Course Editor & Course Auditor screen restrictions #283
7. BryanttV

   assigned

   dcoa

   on Aug 5, 2026
8. dcoa commented on Aug 7, 2026

   

   dcoa

   on Aug 7, 2026

   Last edited by dcoa

   Contributor

   More actions

   @BryanttV @gviedma-aulasneo besides redirecting the user to Admin Console ( that we covered here openedx/frontend-app-authoring#3151 (comment)) from Authoring what other changes should be part of this scope?

   I can review if there is any other place in Authoring that needs redirect but I want to make sure the scope.
9. BryanttV commented on Aug 10, 2026

   

   BryanttV

   on Aug 10, 2026

   Last edited by BryanttV

   Contributor

   More actions

   Hi @dcoa, we have to validate 3 permissions in this issue:

   Category	Permission	Course Editor	Course Auditor
   Course Team & Groups	courses.view_course_team	✔	✔
   	courses.manage_group_configurations	✔	✗
   	courses.manage_course_team	✗	✗

   Is validation working correctly throughout the entire interface — including menus, URL access, etc. — in both the Admin Console and Authoring? If so, we can close this issue.
10. BryanttV

    changed the title [-]Task - implement course teams[/-] [+]Task - implement course team & groups[/+] on Aug 10, 2026
11. dcoa commented on Aug 11, 2026

    

    dcoa

    on Aug 11, 2026

    Last edited by dcoa

    Contributor

    More actions

    Here we need also a view permission for group_configuration or do you think we should use the global course view permission? @BryanttV @gviedma-aulasneo

    

    The Course Team workflow is already covered we only need to update Group Configuration

    Course configuration refinement

    1. ContentGroupsSection/index.jsx: Accept canManageGroupConfigurations prop, pass readOnly to ContentGroupCard, and hide the "Add new group" button + hide EmptyPlaceholder (or pass props to it) when no permission.
    2. EmptyPlaceholder/index.jsx: Accept a canManage prop to change message and hide the button.
    3. empty-placeholder/messages.ts: Add the new message "No group configurations have been added to this course yet."
    4. Tests update.

    Note

    This does not include the decision of view status, once a decision is made about we can include the Page level access visibility, and navigation links validations.

    👀React with 👀1Reacted by Bryann Valderrama
12. dcoa commented on Aug 12, 2026

    

    dcoa

    on Aug 12, 2026

    Last edited by dcoa

    Contributor

    More actions

    @BryanttV just an update when I was checking the refinement also noticed that the group configurations API respond 403 for Course Auditor role.

    👍React with 👍1Reacted by Bryann Valderrama
13. BryanttV commented on Aug 12, 2026

    

    BryanttV

    on Aug 12, 2026

    Contributor

    More actions

    @dcoa, yes. Since the Course Auditor doesn't have the courses.manage_group_configurations permission, the REST API returns a 403. We need to add the new read-only permission to the role. I'm tracking it in this issue: #387
14. dcoa

    moved this from In Grooming to Blocked in RBAC AuthZ Boardon Aug 13, 2026
15. BryanttV

    moved this from Blocked to In Progress in RBAC AuthZ Boardon Aug 27, 2026
16. dcoa

    moved this from In Progress to Ready for Review in RBAC AuthZ Boardon Sep 1, 2026
17. bradenmacdonald

    closed this as completedin frontend-app-authoring#3207on Sep 5, 2026
18. github-project-automation

    moved this from Ready for Review to Done in RBAC AuthZ Boardon Sep 5, 2026