You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: oeps/best-practices/oep-0066-bp-authorization.rst
+8-7Lines changed: 8 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,9 +11,9 @@ OEP-66: User Authorization
11
11
* - Title
12
12
- User Authorization
13
13
* - Last Modified
14
-
- 2023-10-20
14
+
- 2025-12-15
15
15
* - Authors
16
-
- Hilary Sinkoff (hsinkoff@2u.com), Jeremy Bowman (jbowman@edx.org)
16
+
- Hilary Sinkoff (hsinkoff@2u.com), Jeremy Bowman (jbowman@edx.org), Maria F Magallanes (maria.magallanes@edunext.co)
17
17
* - Arbiter
18
18
- Feanil Patel (feanil@axim.org)
19
19
* - Status
@@ -479,6 +479,8 @@ authn data point, but is an accepted way to implement feature specific roles and
479
479
It is advisable to be very careful regarding the jwt token header limits if adding a new feature specific
480
480
set of roles using this implementation path.
481
481
482
+
.. _openedx-authz-section:
483
+
482
484
openedx-authz
483
485
-------------
484
486
@@ -498,13 +500,12 @@ For more information, see the `openedx-authz documentation`_ and the `openedx-au
498
500
content libraries
499
501
------------------
500
502
501
-
Permission is granted on a Feature, in this case Content Library.
503
+
Roles and permissions are granted on a per-library basis for v2 content libraries.
502
504
503
-
Permission is assigned in the CMS exclusively for providing explicit permission to
504
-
view or edit a library in the CMS.
505
+
Explicit roles can be assigned through Studio by accessing the library and selecting the "Manage Team" option. This provides granular control over who can view, edit, or administer each content library.
505
506
506
-
It grants access on a library by library basis and is used for v2 of content libraries
507
-
in the CMS.
507
+
.. note::
508
+
Since Ulmo, these permissions are handled by :ref:`openedx-authz <openedx-authz-section>`.
508
509
509
510
.. note::
510
511
v1 libraries (deprecated) granted access to libraries on a course by course basis
0 commit comments