Muhammad Anas 1599b80a74 fix: respect masqueraded learner permissions when computing subsection show_grades in Progress Tab API (#38025) ...

This PR fixes grade-visibility behavior in the Progress Tab API when staff
users are masquerading as learners.

Previously, subsection show_grades was computed using the real requester’s
staff access, which could expose grades that the masqueraded learner should not
see.

Now, show_grades respects the masqueraded user’s permissions so the API
response matches the learner view.

Co-authored-by: Peter Pinch <pdpinch@mit.edu>

2026-03-05 12:00:07 -05:00

..

course_metadata

test: has_course_author_access correctness

2024-11-29 00:39:58 +05:30

dates

feat: add optional API for hiding the dates tab (#37923)

2026-02-25 16:27:49 -08:00

migrations

BOM-2781: Django codemods on LMS (2) (#28852)

2021-11-11 17:52:57 +05:00

outline

feat: add optional API for hiding the dates tab (#37923)

2026-02-25 16:27:49 -08:00

progress

fix: respect masqueraded learner permissions when computing subsection show_grades in Progress Tab API (#38025)

2026-03-05 12:00:07 -05:00

tests

fix: setup context for emitting event to segment if desired (#36692)

2025-05-09 10:54:37 -04:00

__init__.py

AA-115: Adding external API for dates tab

2020-05-19 12:35:43 -07:00

admin.py

BOM-2781: Django codemods on LMS (2) (#28852)

2021-11-11 17:52:57 +05:00

apps.py

feat: add stacked config model for disabling the frontend-app-learning progress page

2021-05-27 10:40:43 -04:00

models.py

chore: Add missing PII annotations, update safelist

2024-11-05 12:58:36 -05:00

serializers.py

feat!: Remove the course sock and related APIs.

2025-04-07 10:29:39 -04:00

tasks.py

fix: setup context for emitting event to segment if desired (#36692)

2025-05-09 10:54:37 -04:00

toggles.py

feat: optionally emit course completion analytics when a learner enters the courseware (#36507)

2025-04-29 13:46:09 -04:00

urls.py

chore: typos fixed

2024-05-25 18:05:28 +03:30

utils.py

fix: return a 403 instead of a redirect from course_home_api api methods (#32210)

2023-05-24 16:09:34 +00:00