151bd13666
* Generate common/djangoapps import shims for LMS * Generate common/djangoapps import shims for Studio * Stop appending project root to sys.path * Stop appending common/djangoapps to sys.path * Import from common.djangoapps.course_action_state instead of course_action_state * Import from common.djangoapps.course_modes instead of course_modes * Import from common.djangoapps.database_fixups instead of database_fixups * Import from common.djangoapps.edxmako instead of edxmako * Import from common.djangoapps.entitlements instead of entitlements * Import from common.djangoapps.pipline_mako instead of pipeline_mako * Import from common.djangoapps.static_replace instead of static_replace * Import from common.djangoapps.student instead of student * Import from common.djangoapps.terrain instead of terrain * Import from common.djangoapps.third_party_auth instead of third_party_auth * Import from common.djangoapps.track instead of track * Import from common.djangoapps.util instead of util * Import from common.djangoapps.xblock_django instead of xblock_django * Add empty common/djangoapps/__init__.py to fix pytest collection * Fix pylint formatting violations * Exclude import_shims/ directory tree from linting
54 lines
1.9 KiB
Python
54 lines
1.9 KiB
Python
"""
|
|
Encapsulates permissions checks for Course Blocks API
|
|
"""
|
|
from django.contrib.auth.models import User
|
|
from opaque_keys.edx.keys import CourseKey
|
|
|
|
from lms.djangoapps.courseware.access import has_access
|
|
from lms.djangoapps.courseware.access_response import AccessResponse
|
|
from lms.djangoapps.courseware.access_utils import ACCESS_DENIED, ACCESS_GRANTED, check_public_access
|
|
from lms.djangoapps.courseware.courses import get_course
|
|
from common.djangoapps.student.models import CourseEnrollment
|
|
from common.djangoapps.student.roles import CourseStaffRole
|
|
from xmodule.course_module import COURSE_VISIBILITY_PUBLIC
|
|
|
|
|
|
def can_access_all_blocks(requesting_user, course_key):
|
|
"""
|
|
Returns whether the requesting_user can access all the blocks
|
|
in the course.
|
|
"""
|
|
return has_access(requesting_user, CourseStaffRole.ROLE, course_key)
|
|
|
|
|
|
def can_access_others_blocks(requesting_user, course_key):
|
|
"""
|
|
Returns whether the requesting_user can access the blocks for
|
|
other users in the given course.
|
|
"""
|
|
return has_access(requesting_user, CourseStaffRole.ROLE, course_key)
|
|
|
|
|
|
def can_access_self_blocks(requesting_user: User, course_key: CourseKey) -> AccessResponse:
|
|
"""
|
|
Returns whether the requesting_user can access own blocks.
|
|
"""
|
|
user_is_enrolled_or_staff = ( # pylint: disable=consider-using-ternary
|
|
(requesting_user.id and CourseEnrollment.is_enrolled(requesting_user, course_key)) or
|
|
has_access(requesting_user, CourseStaffRole.ROLE, course_key)
|
|
)
|
|
if user_is_enrolled_or_staff:
|
|
return ACCESS_GRANTED
|
|
try:
|
|
return is_course_public(course_key)
|
|
except ValueError:
|
|
return ACCESS_DENIED
|
|
|
|
|
|
def is_course_public(course_key: CourseKey) -> AccessResponse:
|
|
"""
|
|
This checks if a course is publicly accessible or not.
|
|
"""
|
|
course = get_course(course_key, depth=0)
|
|
return check_public_access(course, [COURSE_VISIBILITY_PUBLIC])
|