Prevent non edX staff from requesting changes to certain settings via POST request (#28)

* modify post data based on user

* added spacing
This commit is contained in:
alangsto
2020-08-03 16:57:42 -04:00
committed by GitHub
parent a0e26ac339
commit 747cdb4380
2 changed files with 5 additions and 3 deletions

View File

@@ -77,12 +77,14 @@ function ExamSettings(props) {
const dataToPostBack = {
proctored_exam_settings: {
enable_proctored_exams: enableProctoredExams,
allow_proctoring_opt_out: allowOptingOut,
proctoring_provider: proctoringProvider,
proctoring_escalation_email: proctortrackEscalationEmail,
create_zendesk_tickets: createZendeskTickets,
},
};
if (isEdxStaff) {
dataToPostBack.proctored_exam_settings.allow_proctoring_opt_out = allowOptingOut;
dataToPostBack.proctored_exam_settings.create_zendesk_tickets = createZendeskTickets;
}
setSubmissionInProgress(true);
StudioApiService.saveProctoredExamSettingsData(props.courseId, dataToPostBack).then(() => {
setSaveSuccess(true);

View File

@@ -447,7 +447,7 @@ describe('ProctoredExamSettings save settings tests', () => {
get: mockClientGet,
post: mockClientPost,
}));
auth.getAuthenticatedUser = jest.fn(() => ({ userId: 3 }));
auth.getAuthenticatedUser = jest.fn(() => ({ userId: 3, administrator: true }));
return { mockClientGet, mockClientPost };
}