Skip to content

Commit 196ec1f

Browse files
committed
docs: apply feedback
1 parent b6d7fc0 commit 196ec1f

1 file changed

Lines changed: 8 additions & 7 deletions

File tree

oeps/best-practices/oep-0066-bp-authorization.rst

Lines changed: 8 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -11,9 +11,9 @@ OEP-66: User Authorization
1111
* - Title
1212
- User Authorization
1313
* - Last Modified
14-
- 2023-10-20
14+
- 2025-12-15
1515
* - Authors
16-
- Hilary Sinkoff (hsinkoff@2u.com), Jeremy Bowman (jbowman@edx.org)
16+
- Hilary Sinkoff (hsinkoff@2u.com), Jeremy Bowman (jbowman@edx.org), Maria F Magallanes (maria.magallanes@edunext.co)
1717
* - Arbiter
1818
- Feanil Patel (feanil@axim.org)
1919
* - Status
@@ -479,6 +479,8 @@ authn data point, but is an accepted way to implement feature specific roles and
479479
It is advisable to be very careful regarding the jwt token header limits if adding a new feature specific
480480
set of roles using this implementation path.
481481

482+
.. _openedx-authz-section:
483+
482484
openedx-authz
483485
-------------
484486

@@ -498,13 +500,12 @@ For more information, see the `openedx-authz documentation`_ and the `openedx-au
498500
content libraries
499501
------------------
500502

501-
Permission is granted on a Feature, in this case Content Library.
503+
Roles and permissions are granted on a per-library basis for v2 content libraries.
502504

503-
Permission is assigned in the CMS exclusively for providing explicit permission to
504-
view or edit a library in the CMS.
505+
Explicit roles can be assigned through Studio by accessing the library and selecting the "Manage Team" option. This provides granular control over who can view, edit, or administer each content library.
505506

506-
It grants access on a library by library basis and is used for v2 of content libraries
507-
in the CMS.
507+
.. note::
508+
Since Ulmo, these permissions are handled by :ref:`openedx-authz <openedx-authz-section>`.
508509

509510
.. note::
510511
v1 libraries (deprecated) granted access to libraries on a course by course basis

0 commit comments

Comments
 (0)