0d88379eeb
This commit adds all of cms. These keys are now objects with a limited interface, and the particular internal representation is managed by the data storage layer (the modulestore). For the LMS, there should be no outward-facing changes to the system. The keys are, for now, a change to internal representation only. For Studio, the new serialized form of the keys is used in urls, to allow for further migration in the future. Co-Author: Andy Armstrong <andya@edx.org> Co-Author: Christina Roberts <christina@edx.org> Co-Author: David Baumgold <db@edx.org> Co-Author: Diana Huang <dkh@edx.org> Co-Author: Don Mitchell <dmitchell@edx.org> Co-Author: Julia Hansbrough <julia@edx.org> Co-Author: Nimisha Asthagiri <nasthagiri@edx.org> Co-Author: Sarina Canelake <sarina@edx.org> [LMS-2370]
36 lines
1.4 KiB
Python
36 lines
1.4 KiB
Python
from student.roles import CourseStaffRole, GlobalStaff, CourseInstructorRole
|
|
from student import auth
|
|
|
|
|
|
def has_course_access(user, course_key, role=CourseStaffRole):
|
|
"""
|
|
Return True if user allowed to access this course_id
|
|
Note that the CMS permissions model is with respect to courses
|
|
There is a super-admin permissions if user.is_staff is set
|
|
Also, since we're unifying the user database between LMS and CAS,
|
|
I'm presuming that the course instructor (formally known as admin)
|
|
will not be in both INSTRUCTOR and STAFF groups, so we have to cascade our
|
|
queries here as INSTRUCTOR has all the rights that STAFF do
|
|
"""
|
|
if GlobalStaff().has_user(user):
|
|
return True
|
|
return auth.has_access(user, role(course_key))
|
|
|
|
|
|
def get_user_role(user, course_id):
|
|
"""
|
|
What type of access: staff or instructor does this user have in Studio?
|
|
|
|
No code should use this for access control, only to quickly serialize the type of access
|
|
where this code knows that Instructor trumps Staff and assumes the user has one or the other.
|
|
|
|
This will not return student role because its purpose for using in Studio.
|
|
|
|
:param course_id: the course_id of the course we're interested in
|
|
"""
|
|
# afaik, this is only used in lti
|
|
if auth.has_access(user, CourseInstructorRole(course_id)):
|
|
return 'instructor'
|
|
else:
|
|
return 'staff'
|