Commit Graph

60535 Commits

Author SHA1 Message Date
Jawayria
f076b9ea3e Merge pull request #29336 from edx/jenkins/reusable-workflow-bd2223f
refactor: Updated 'upgrade requirements' workflow to use reusable workflows
2021-12-10 14:35:34 +05:00
Ali Akbar
7fe43a3cbf Merge pull request #29519 from edx/aakbar/PROD-2590
feat: allow get account info on lms user id
2021-12-10 12:50:13 +05:00
Tim McCormack
9f9e0acc55 feat: Destroy session and send back an error if user identity changes (#28456)
A new feature toggle, default off, causes the session to be deleted when
the user identity on the response does not match the session or request.

There are a small number of requests that cause the user present on the
session at the time of the request to be a different user by the time of
the response. As far as I can tell, these are all cases where a user's
browser somehow ends up with a mix of cookies from multiple legitimate
login sessions on different accounts on the same device.

Because there no longer seems to be any case where this mismatch occurs
and where the response should be allowed through, this commit introduces
a feature toggle `ENFORCE_SAFE_SESSIONS` which will destroy the active
session and overwrite the response.

The plan is to make this behavior available in the next named release and
permanent in the one after.

Also:

- Use less fragile method of checking mocked set_attribute calls in tests
2021-12-09 19:23:22 +00:00
Matthew Piatetsky
5321d05b48 feat: add adr for weekly learning goals (#29543) 2021-12-09 13:02:41 -05:00
Abdurrehman
c73e46ff09 fix: resolve incomplete module import for field overrides (#29391) 2021-12-09 12:10:27 -05:00
Michael Terry
3fd6f394cf Merge pull request #29541 from edx/mikix/anon-guards
fix: add a couple guards for anonymous users
2021-12-09 11:51:38 -05:00
edX requirements bot
6d61d8a557 refactor: Updated 'upgrade requirements' workflow to use reusable workflows 2021-12-09 21:45:35 +05:00
AliAkbar
c07c5bc0dd feat: allow get account info on lms user id 2021-12-09 20:27:18 +05:00
Michael Terry
e2e37154ce fix: add a couple guards for anonymous users
This fixes a couple places (LastSeenCoursewareTimezone and
UserCourseTag) where we were saving an entry for a user, but not
making sure we ignored anonymous users.
2021-12-09 10:26:51 -05:00
Alex Bender
40cf9d654e fix: import+export management commands 2021-12-09 10:01:34 -05:00
Andrew Shultz
3d1278ed87 Merge pull request #29533 from edx/ashultz0/proctoring-481
chore: update proctoring to 4.8.1
2021-12-09 08:51:58 -05:00
AsadAzam
3f06445389 feat: added pii params for program discussions (#29532)
* feat: added pii params for program discussions

* refactor: added conditions
2021-12-09 18:39:34 +05:00
Jawayria
fab0656bd5 Merge pull request #29384 from edx/jawayria/bom-2606-12
chore: Applied lint-amnesty on lms/djangoapps/courseware
2021-12-09 18:21:44 +05:00
Aarif
76a8aaf6cd fix: updated the unit tests workflow to simplify job names and read test paths from a separate file (#29472) 2021-12-09 18:21:17 +05:00
Jawayria
472ccdabe0 Merge pull request #29431 from edx/jawayria/bom-2606-35
chore: Applied lint-amnesty on openedx/core/djangoapps
2021-12-09 18:20:46 +05:00
Jawayria
584c5daf16 Merge pull request #29432 from edx/jawayria/bom-2606-34
chore: Applied lint-amnesty on openedx/core/djangoapps
2021-12-09 18:20:23 +05:00
Jawayria
95eb23cc07 Merge pull request #29433 from edx/jawayria/bom-2606-33
chore: Applied lint-amnesty on openedx/core/djangoapps
2021-12-09 18:19:56 +05:00
Jawayria
29127830ff Merge pull request #29434 from edx/jawayria/bom-2606-32
chore: Applied lint-amnesty on openedx/core/djangoapps
2021-12-09 18:19:18 +05:00
Kshitij Sobti
00e3affa90 fix: Include all blocks and skip access checks for get_divided_discussions (#29539) 2021-12-09 16:20:31 +05:00
Jawayria
5355d2823c fix: split pr to two 2021-12-09 13:43:48 +05:00
Jawayria
e48031cd86 chore: Applied lint-amnesty on openedx/core/djangoapps 2021-12-09 13:39:45 +05:00
Jawayria
7663592aa6 chore: Applied lint-amnesty on openedx/core/djangoapps 2021-12-09 13:37:27 +05:00
Jawayria
67b44d3b45 chore: Applied lint-amnesty on openedx/core/djangoapps 2021-12-09 13:35:36 +05:00
Jawayria
8ccb8b0608 chore: Applied lint-amnesty on openedx/core/djangoapps 2021-12-09 13:32:06 +05:00
Justin Hynes
ffa0fdee7a Merge pull request #29525 from edx/jhynes/microba-1574_logging-pii
fix: (microba-1574) stop logging PII in bulk course email log messages
2021-12-08 13:29:56 -05:00
Andy Shultz
d80a897ae4 chore: update proctoring to 4.8.1
this completes the drop of the old attempt history table

MST-963
2021-12-08 10:54:59 -05:00
Andrew Shultz
0885837775 Merge pull request #29527 from edx/ashultz0/proctoring-480
chore: update edx-proctoring to 4.8.0
2021-12-08 09:36:52 -05:00
Dillon Dumesnil
40964045e4 Merge pull request #29526 from edx/mikix/preserve-params-on-redirect
fix: when redirecting to the MFE, preserve query flags
2021-12-08 05:46:17 -08:00
edX requirements bot
bb20b17428 Python Requirements Update (#29516)
* chore: Updating Python Requirements

* fix: fix pylint issues

Co-authored-by: Mohammad Ahtasham ul Hassan <mohammad.ahtasham@arbisoft.com>
2021-12-08 14:13:27 +05:00
Waheed Ahmed
5d5a11fc16 chore: remove pyc file added by mistake (#29529) 2021-12-08 12:22:57 +05:00
Uzair Rasheed
971dc175f6 Merge pull request #29522 from edx/add-prop-to-mark-users
refactor: add a property to distinguish old and new users
2021-12-08 01:42:29 +05:00
Justin Hynes
5fa71f6832 fix: (microba-1574) stop logging PII in bulk course email log messages
[MICROBA-1574]
- update bulk course email task log messages to use user id vs. email address
2021-12-07 14:59:47 -05:00
Andy Shultz
ebd037d895 chore: update edx-proctoring to 4.8.0
removing use of old history table

skips migrations in sync test pending the migration catching up next release

part of MST-963
2021-12-07 14:49:31 -05:00
Michael Terry
bf2c2ce3c3 fix: when redirecting to the MFE, preserve query flags
This can potentially fix analytics based on query params like
utm_campaign and the like. And generally seems like the correct
thing to do.

AA-1128
2021-12-07 14:10:32 -05:00
Binod Pant
f32128f7a0 feat: edx-enterprise releases 3.36.1-3 (#29523)
[3.36.3] -------- feat: Integrated channels, grade send logic only logs instead of raising when enterprise_customer_user record is inactive  [3.36.2] -------- feat: add is_active on enterprise customer invite key  [3.36.1] feat: improved integrated channel log consistency
2021-12-07 11:20:44 -05:00
Mohammad Ahtasham ul Hassan
8320dcb0e8 build: update stylint and eslint thresholds (#29471)
* build: update stylint and eslint thresholds

* Removed stylint threshold

* Update test_stylelint.py

* fix: fix eslint issues
2021-12-07 20:09:13 +05:00
julianajlk
5de4264c84 fix: Update Track Selection to support verified only mode (#29497)
REV-2450
2021-12-07 08:14:49 -05:00
uzairr
443034ed55 refactor: add a property to distinguish old and new users
Add a new prop in existing props to differentiate users either
a particular one is newly registered or not.

VAN-665
2021-12-07 17:59:31 +05:00
Zainab Amir
acf5add774 feat: add marketing email option on registration (#29397) 2021-12-07 17:16:28 +05:00
Zainab Amir
5f77890c58 refactor: update account verification messages (#29329)
* refactor: update account verification messages

* fix: quality check
2021-12-07 17:16:16 +05:00
Abdurrehman
6c6cf0ad0b feat: external plugin integration in instructor dashboard (#29376)
* feat: external plugin integration fixes
2021-12-07 15:54:00 +05:00
Mubbshar Anwar
a65a486125 fix: small fixes in save for later api (#29518)
error code response convention
update django request object for json data
2021-12-07 14:11:21 +05:00
Attiya Ishaque
7917048fe3 fix: add error-code in save for later rate limit api (#29483) 2021-12-07 12:15:50 +05:00
Kshitij Sobti
9f4bc9900b feat: add discussions context to course blocks API (#29300)
Add a new course blocks transformer that adds discussion context for units.
2021-12-07 11:10:48 +05:00
Bianca Severino
51fe9b9da4 Merge pull request #29514 from edx/bseverino/proctoring-4.7.3
chore: upgrade edx-proctoring to 4.7.3
2021-12-06 13:22:17 -05:00
Manny
d3e0e5df6a feat: bump edx-enterprise to 3.36.0 (#29513) 2021-12-06 12:15:57 -05:00
Bianca Severino
0652265054 chore: upgrade edx-proctoring to 4.7.3 2021-12-06 12:13:26 -05:00
Dillon Dumesnil
f1cc288189 Merge pull request #29510 from edx/ddumesnil/override-freq-cap-aa-1127
feat: AA-1127: Overrides Braze Frequency Cap for dynamic pacing emails
2021-12-06 07:44:55 -08:00
Kevin Valencia
fa258de357 Update from_addr for default from bulk emails (#29001)
* fix: update from_addr for default from bulk emails

Co-authored-by: Kevin Valencia <kevin@bitmaker.la>
2021-12-06 10:28:55 -05:00
Dillon Dumesnil
709290544d feat: AA-1127: Overrides Braze Frequency Cap for dynamic pacing emails
edx-ace version 1.4.1 introduces the ability to override braze
email frequency caps.
2021-12-06 07:56:28 -07:00