feat: add advanced settings view permission for course roles

Author: bra-i-am

openedx_authz/constants/permissions.py

@@ -168,6 +168,11 @@
     effect="allow",
 )
 
+COURSES_VIEW_ADVANCED_SETTINGS = PermissionData(
+    action=ActionData(external_key=f"{COURSES_NAMESPACE}.view_advanced_settings"),
+    effect="allow",
+)
+
 COURSES_MANAGE_CERTIFICATES = PermissionData(
     action=ActionData(external_key=f"{COURSES_NAMESPACE}.manage_certificates"),
     effect="allow",

openedx_authz/constants/roles.py

@@ -69,6 +69,7 @@
     permissions.COURSES_VIEW_CHECKLISTS,
     permissions.COURSES_VIEW_COURSE_TEAM,
     permissions.COURSES_VIEW_SCHEDULE_AND_DETAILS,
+    permissions.COURSES_VIEW_ADVANCED_SETTINGS,
 ]
 
 COURSE_AUDITOR = RoleData(external_key="course_auditor", permissions=COURSE_AUDITOR_PERMISSIONS)
@@ -82,6 +83,7 @@
     permissions.COURSES_VIEW_CHECKLISTS,
     permissions.COURSES_VIEW_COURSE_TEAM,
     permissions.COURSES_VIEW_SCHEDULE_AND_DETAILS,
+    permissions.COURSES_VIEW_ADVANCED_SETTINGS,
     permissions.COURSES_EDIT_COURSE_CONTENT,
     permissions.COURSES_MANAGE_LIBRARY_UPDATES,
     permissions.COURSES_MANAGE_COURSE_UPDATES,
@@ -92,6 +94,7 @@
     permissions.COURSES_MANAGE_GROUP_CONFIGURATIONS,
     permissions.COURSES_EDIT_DETAILS,
     permissions.COURSES_MANAGE_TAGS,
+    permissions.COURSES_MANAGE_ADVANCED_SETTINGS,
 ]
 
 COURSE_EDITOR = RoleData(external_key="course_editor", permissions=COURSE_EDITOR_PERMISSIONS)

openedx_authz/engine/config/authz.policy

@@ -81,6 +81,7 @@ p, role^course_auditor, act^courses.view_grading_settings, course-v1^*, allow
 p, role^course_auditor, act^courses.view_checklists, course-v1^*, allow
 p, role^course_auditor, act^courses.view_course_team, course-v1^*, allow
 p, role^course_auditor, act^courses.view_schedule_and_details, course-v1^*, allow
+p, role^course_auditor, act^courses.view_advanced_settings, course-v1^*, allow
 
 # Course Editor Role Policies
 p, role^course_editor, act^courses.view_course, course-v1^*, allow
@@ -101,6 +102,7 @@ p, role^course_editor, act^courses.edit_grading_settings, course-v1^*, allow
 p, role^course_editor, act^courses.manage_group_configurations, course-v1^*, allow
 p, role^course_editor, act^courses.edit_details, course-v1^*, allow
 p, role^course_editor, act^courses.manage_tags, course-v1^*, allow
+p, role^course_editor, act^courses.manage_advanced_settings, course-v1^*, allow
 
 # Course Staff Role Policies
 p, role^course_staff, act^courses.legacy_staff_role_permissions, course-v1^*, allow