Skip to content

Flexible Access Control

Damith C. Rajapakse edited this page Jan 25, 2019 · 1 revision
  • Priority: High
  • Knowledge required: Full-stack development/testing, E2E testing
  • Status: Completed

Add more flexible user access controls so that different users can be given different privileges.

Currently all instructors of a course has the same access privileges. This is risky, e.g. any instructor can delete the course, and should not continue.

Things to consider:

  1. Access control approach to be adopted, e.g. action-based control, role-based control, object-based control, or a combination.
  2. Migration of legacy data to the new scheme.
  3. Possibility of supporting tutorial groups within a course.
  4. Possibility of assigning different instructors to different students in the same course.