We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
2 parents d1f887b + cb7f1b6 commit 2638220Copy full SHA for 2638220
app/controllers/course_offerings_controller.rb
@@ -610,7 +610,12 @@ def authorize_user_for_course_offering_data
610
end
611
612
# In the 'show' action, a student should be able to see the course offering if they are enrolled.
613
- if action_name == 'show' && course_offering.is_enrolled?(current_user)
+ if (action_name == 'show' ||
614
+ action_name == 'get_individual_attempt' ||
615
+ action_name == 'find_attempts' ||
616
+ action_name == 'get_codeworkout_progress' ||
617
+ action_name == 'find_module_progresses') &&
618
+ course_offering.is_enrolled?(current_user)
619
return
620
621
0 commit comments