Prevent non edX staff from requesting changes to certain settings via POST request (#28)
* modify post data based on user * added spacing
This commit is contained in:
@@ -77,12 +77,14 @@ function ExamSettings(props) {
|
||||
const dataToPostBack = {
|
||||
proctored_exam_settings: {
|
||||
enable_proctored_exams: enableProctoredExams,
|
||||
allow_proctoring_opt_out: allowOptingOut,
|
||||
proctoring_provider: proctoringProvider,
|
||||
proctoring_escalation_email: proctortrackEscalationEmail,
|
||||
create_zendesk_tickets: createZendeskTickets,
|
||||
},
|
||||
};
|
||||
if (isEdxStaff) {
|
||||
dataToPostBack.proctored_exam_settings.allow_proctoring_opt_out = allowOptingOut;
|
||||
dataToPostBack.proctored_exam_settings.create_zendesk_tickets = createZendeskTickets;
|
||||
}
|
||||
setSubmissionInProgress(true);
|
||||
StudioApiService.saveProctoredExamSettingsData(props.courseId, dataToPostBack).then(() => {
|
||||
setSaveSuccess(true);
|
||||
|
||||
@@ -447,7 +447,7 @@ describe('ProctoredExamSettings save settings tests', () => {
|
||||
get: mockClientGet,
|
||||
post: mockClientPost,
|
||||
}));
|
||||
auth.getAuthenticatedUser = jest.fn(() => ({ userId: 3 }));
|
||||
auth.getAuthenticatedUser = jest.fn(() => ({ userId: 3, administrator: true }));
|
||||
return { mockClientGet, mockClientPost };
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user