[Product Pull Request] feat: allow instructors to manage certificates

[jmakowski1123]

For Contributing Author:

This is the Primary Product Ticket for the following community contribution: New feature that will allow course instructors to manage certificates.

Checklist prior to undergoing Product Review:

The following information is required in order for Product Managers to be able to review your pull request:

• Explanation of the problem being solved
• Description of how users will be impacted, and which users will be impacted
• Screenshots or video showing the functionality or fix, before and after
• Reproduction steps and/or testing steps

Only if necessary:

• If necessary, links to corresponding configuration changes
• If necessary, links to corresponding enablement changes, particularly waffle/toggle status details

Related PRs

openedx/edx-platform#31265

---

For Product Manager doing the review:

What criteria should be analyzed from Product to approve a PR?

• The problem being solved by the feature or fix is clear.
• There is clarity on how the change or fix will impact the end user.
• It is clear that the change will not negatively impact users or other areas of the platform.
• The change is implemented comprehensively.
• Any changes to UI use the current, standard Paragon Design System: https://paragon-openedx.netlify.app/

[github-actions]

Thanks for your submission, @openedx/open-edx-project-managers will review shortly.

[jmakowski1123]

Product information from the original PR:

Description

Currently only super admin and staff are able to configure the certificates for the course.

This PR allows course instructors (admin course permissions) to manage certificates through all the actions available in the tab instructor > certificates, in this way, each instructor will be able to manage their certificates, which allows more granularity on the permissions granted to users. The staff permission is a somewhat dangerous permission, since it grants access to a wide variety of functions, with this change the instructors (who already manage the users, cohorts, and others) will also be able to manage the certificates.

This feature is used for eduNEXT due to client requests and we think is useful for the community, we put this into consideration for product reviewers (@santiagosuarezedunext @jmakowski1123 ).

Testing instructions

1. Enable these FEATURES in your environment (to activate all certificate options):

  CERTIFICATES_INSTRUCTOR_GENERATION: true
  CUSTOM_CERTIFICATE_TEMPLATES_ENABLED: true

2. Create a course with a certificate.
3. Create a new user without special permissions (superuser, staff).
4. Add the user to the course team as Admin (i.e. Instructor) via the instructor > membership tab.
   
5. The certificate tab should be visible and all the certificate operations should work (certificate generation, whitelist, self generation, etc)
   

[Ian2012]

Hi @jmakowski1123, I'm part of the eduNEXT team, you can find answers to your inquiries below:

Does the decision to extend course instructors this new role still lie with superusers and/or course staff?

There should be a feature flag to enable this functionality at the instance level, allowing superusers to have control of it on their installation. (we don't recommend granting course staff that control over the course)

Are there unintended risks, such as the Instructor getting access to additional permissions that they shouldn't?

No, there are such no risks as the Open edX permissions modified are very granular and straightforward. The permissions changed are:

• ENABLE_CERTIFICATE_GENERATION
• GENERATE_CERTIFICATE_EXCEPTIONS
• GENERATE_BULK_CERTIFICATE_EXCEPTIONS
• GENERATE_EXAMPLE_CERTIFICATES
• START_CERTIFICATE_GENERATION
• START_CERTIFICATE_REGENERATION
• CERTIFICATE_EXCEPTION_VIEW
• CERTIFICATE_INVALIDATION_VIEW

How would this risk be mitigated?

Related tests have been modified as this functionality is expected.

Can this role expansion be managed at both the course and instance levels?

Not at the moment, but it makes sense that this feature can be enabled at the instance level, but I'm not sure if it's really necessary to have control over it at the course level. @jmakowski1123 what do you think?

cc @dcoa @mariajgrimaldi

[Ian2012]

Reviewing the product review undergo list:

Description of how users will be impacted, and which users will be impacted.

At the current state, it will affect course instructors as they will be able to have control over the certificate, which makes sense since usually instructors have more contact with the students and can solve certificate inquiries and issues easily.

[jmakowski1123]

Thanks very much for the additional information, @Ian2012 ! I agree, I think it makes sense for this to implemented at the Instance level (rather than the course level).

I'll pass this ticket over to Claire Zhang for final review, who is the product manager for certificate feature enhancements.

[mphilbrick211]

Hi @jmakowski1123 @czhang0912! Just following up on this. Any updates?

[czhang0912]

@mphilbrick211 As Kelly mentioned, we would like to hold any new features on certificate now.