Bug: Hide publish library button in Studio.

[MaferMazu]

Description

Currently, a user with edit permissions can see the publish button in Studio. We have added a publish permission, so if a user has a role like contributor (which can edit but not publish), they will see the button and an error message when performing the action.

Expected behavior: hide the publish button unless you have publish permission, because it could be confusing and a bad experience to see an option you can't use.

How to reproduce the behavior

1. Login in stage using the contributor user https://apps.singapore.edunext.cloud/authoring/library/lib:OpenedX:CSPROB (it has contributor role over the lib:OpenedX:CSPROB library)
2. View the detail of the library here: https://apps.singapore.edunext.cloud/authoring/library/lib:OpenedX:CSPROB
3. See the publish button, try it and it will fail.

Expected behavior

Hide the publish button if the user doesn't have publish permissions.

[MaferMazu]

It came from openedx/openedx-platform#37501

[rodmgwgu]

I did some research on this, fixing this bug will require frontend changes, as the frontend is currently deciding to show the publish button based on the can_edit_library boolean included in the /api/libraries/v2/${libraryId}/ endpoint, which didn't account for a separate publish permission.

Pointers from my research:

This is the component: https://github.com/openedx/frontend-app-authoring/blob/master/src/library-authoring/generic/status-widget/index.tsx#L115

This is the decision logic: https://github.com/openedx/frontend-app-authoring/blob/master/src/library-authoring/common/context/LibraryContext.tsx#L110

This is the url being called: /api/libraries/v2/${libraryId}/

API View: https://github.com/openedx/edx-platform/blob/master/openedx/core/djangoapps/content_libraries/rest_api/libraries.py#L271

Serializer: https://github.com/openedx/edx-platform/blob/master/openedx/core/djangoapps/content_libraries/rest_api/serializers.py#L34

[rodmgwgu]

Possible approaches for the solution:

• Approach 1: Modify frontend-app-authoring to use the permissions/validate/me endpoint and evaluate based on that
• Approach 2: Modify /api/libraries/v2/${libraryId}/ in edx-platform to include a can_publish_library boolean, and update frontend-app-authoring to use it.

what path do you think would be better? @MaferMazu @mariajgrimaldi