From 7697b7dd46d1e0d1f1d71e895db140111589c77a Mon Sep 17 00:00:00 2001 From: Michael Terry Date: Fri, 13 Nov 2020 12:58:18 -0500 Subject: [PATCH] When masquerading in courseware API, reset the request user It's important that request.user be set as the effective user, because waffle flags and bits of code around the place look at it. This should make masquerading more accurate to what the learner sees. --- openedx/core/djangoapps/courseware_api/views.py | 1 + 1 file changed, 1 insertion(+) diff --git a/openedx/core/djangoapps/courseware_api/views.py b/openedx/core/djangoapps/courseware_api/views.py index a6c3e4e3f7..61b7108ac9 100644 --- a/openedx/core/djangoapps/courseware_api/views.py +++ b/openedx/core/djangoapps/courseware_api/views.py @@ -72,6 +72,7 @@ class CoursewareMeta: course_key, staff_access=self.original_user_is_staff, ) + self.request.user = self.effective_user self.is_staff = has_access(self.effective_user, 'staff', self.overview).has_access self.enrollment_object = CourseEnrollment.get_enrollment(self.effective_user, self.course_key, select_related=['celebration'])