Muhammad Anas 1599b80a74 fix: respect masqueraded learner permissions when computing subsection show_grades in Progress Tab API (#38025) ...

This PR fixes grade-visibility behavior in the Progress Tab API when staff
users are masquerading as learners.

Previously, subsection show_grades was computed using the real requester’s
staff access, which could expose grades that the masqueraded learner should not
see.

Now, show_grades respects the masqueraded user’s permissions so the API
response matches the learner view.

Co-authored-by: Peter Pinch <pdpinch@mit.edu>

2026-03-05 12:00:07 -05:00

..

badges

feat: Migrations for badges deletion

2023-10-26 01:03:26 +05:00

branding

fix: Handle a case that could cause infinite redirects.

2025-10-21 12:11:57 -04:00

bulk_email

feat: make ACCOUNT_MICROFRONTEND_URL site aware.

2026-03-02 08:18:12 -05:00

bulk_enroll

feat: upgrading students_update_enrollment api to DRF (#37074)

2025-07-29 10:36:52 -04:00

bulk_user_retirement

Update all edx-platform REST endpoints to support JWT Auth (#34152)

2024-02-13 10:46:58 -05:00

ccx

feat: bump opaque-keys to get case-sensitivity support + default max_length (#38044)

2026-02-25 09:05:15 -08:00

certificates

feat: bump opaque-keys to get case-sensitivity support + default max_length (#38044)

2026-02-25 09:05:15 -08:00

commerce

fix: migrations to make postgresql compatible. (#35762)

2026-02-12 14:02:46 -05:00

course_api

feat: bump opaque-keys to get case-sensitivity support + default max_length (#38044)

2026-02-25 09:05:15 -08:00

course_blocks

docs: update references from setup.py to pyproject.toml

2026-03-03 10:46:16 -05:00

course_goals

chore: fix missing override_settings import.

2025-11-07 07:38:21 +01:00

course_home_api

fix: respect masqueraded learner permissions when computing subsection show_grades in Progress Tab API (#38025)

2026-03-05 12:00:07 -05:00

course_wiki

chore: update markdown dependency to allow newer versions

2025-05-17 05:42:01 +00:00

courseware

docs: update references from setup.py to pyproject.toml

2026-03-03 10:46:16 -05:00

coursewarehistoryextended

fix!: Update the migration to have one Index on student_module_id

2025-05-30 19:44:41 +05:00

debug

refactor: remove lms/djangoapps/debug/management directory

2022-11-16 13:08:22 +01:00

discussion

Discussion service to enable permission and access provider (#37912)

2026-02-11 19:37:16 +05:00

edxnotes

build!: Switch to openedx-core (renamed from openedx-learning) (#38011)

2026-02-18 22:38:25 +00:00

experiments

fix: replace deprecated assertDictContainsSubset()

2025-10-12 11:10:36 +05:00

gating

fix: failing test, not really sure why this worked before without modulestore.update_item()

2023-05-23 18:15:14 -07:00

grades

docs: update references from setup.py to pyproject.toml

2026-03-03 10:46:16 -05:00

instructor

feat: The API now returns learner_count and staff_count alongside the existing enrollment fields.

2026-03-03 11:26:17 -07:00

instructor_analytics

Follow-up to PR 36789 (#37751)

2026-01-08 13:03:46 -05:00

instructor_task

fix: Ensure problem response reports include all descendant problems regardless of nesting or randomization (#36677)

2026-02-05 11:16:56 -05:00

learner_dashboard

chore: move the program dashboard APIs (#36420)

2025-03-24 12:06:52 -04:00

learner_home

fix: look up ENABLE_CATALOG_MICROFRONTEND in settings directly, adjust tests

2025-09-29 14:16:46 +03:00

lms_initialization

…

lms_xblock

refactor: rename ModuleStore runtimes now that XModules are gone (#35523)

2025-10-29 15:46:07 -04:00

lti_provider

feat: bump opaque-keys to get case-sensitivity support + default max_length (#38044)

2026-02-25 09:05:15 -08:00

mailing

Ran pyupgrade on lms/djangoapps

2021-02-19 17:47:37 +05:00

mfe_config_api

refactor: migrated FEATURES dict settings to top-level in core files and fixed related test files. (#37389)

2026-01-20 11:55:26 -05:00

mobile_api

refactor: migrated FEATURES dict settings to top-level in core files and fixed related test files. (#37389)

2026-01-20 11:55:26 -05:00

monitoring

chore: remove generate_code_owner_mappings (script moved) (#32403)

2023-06-08 10:36:49 -04:00

ora_staff_grader

docs: Update edx.rtd.io links to docs.openedx.org

2025-04-02 12:10:56 -04:00

program_enrollments

fix: add additional kwargs to USER_RETIRE_LMS (#38078)

2026-03-04 14:02:21 -07:00

rss_proxy

feat: Django codemods on LMS (3) (#28853)

2021-11-16 18:27:21 +05:00

static_template_view

fix: enable pylint warnings (#36195)

2025-01-30 17:15:33 +05:00

staticbook

test: Update more tests that had short passwords.

2023-10-10 16:36:26 -04:00

support

feat: bump opaque-keys to get case-sensitivity support + default max_length (#38044)

2026-02-25 09:05:15 -08:00

survey

test: Update to reuse variables in more places.

2023-10-16 12:33:25 -04:00

teams

feat: bump opaque-keys to get case-sensitivity support + default max_length (#38044)

2026-02-25 09:05:15 -08:00

tests

test: removing test as not needed anymore (#28954)

2021-10-06 20:53:46 +05:00

user_tours

chore: Add missing PII annotations, update safelist

2024-11-05 12:58:36 -05:00

verify_student

feat: make ACCOUNT_MICROFRONTEND_URL site aware.

2026-03-02 08:18:12 -05:00

__init__.py

…

utils.py

chore: rename braze_client to email_client

2025-03-26 11:21:56 +05:00