learningequality / learningequality/studio
Ability to sync nodes should be restricted to owner of derivative channel
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 191
- Forks
- 307
- Avg merge
- 5d 6h
- Merged PRs (30d)
- 10
Description
Summary
It could prove harmful if all editors of a channel are allowed to sync nodes of a derivative channel from a source channel.
It is one good thing, probably a bug, that sync of topic and content meta data is not working as of now. (probably related #1084 )
Either include a jarring warning before proceeding with the sync or better still allow only the owner of the channel or introduce one more level of permissions (Edit+Sync) to execute a Sync.
Category
ENHANCEMENT
Real-life consequences (anything community should be aware of, for instance how it affects end users)
It could just be disaster when someone mistakenly hits all check boxes in the sync dialogue and presses SYNC on heavily customised channels with topic meta-data.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue concerns node syncing in the sync dialogue between derivative and source channels; review the related #1084 discussion first. Confirm with maintainers whether owner-only access, an Edit+Sync permission, or a warning is intended, then verify that the agreed safeguard covers the dangerous sync choices described here.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authorization, backend
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100