openedx/openedx-authz

View on GitHub

Specifications for the authorization model, policy data structures, and enforcement APIs that define how access control is evaluated and managed across the Open edX ecosystem.

Stars: 0
Forks: 9
Open beginner issues: 0
Indexed issues: 72
Avg merge: 13d 9h
Merged PRs (30d): 9

Dominant language: Python
License: AGPL-3.0
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

72 open issues indexed

Higher-level scopes are not returned when querying a more specific scope Open

willow

Difficulty 4/5 3-5 days Newbie friendliness 48/100

openedx/openedx-authz#457 · Opened Sep 18, 2026
Add opt-in course-authoring filtering to authorization endpoints Open

willow

openedx/openedx-authz#456 · 1 assignee · Opened Sep 18, 2026
Course Optimizer endpoints ignore authz permissions Open

willow

openedx/openedx-authz#455 · 1 assignee · Opened Sep 17, 2026
Remove the link to the library in a unit when the user does not have permission for that specific library Open

openedx/openedx-authz#450 · 1 assignee · Opened Sep 14, 2026
Make `TaxonomyOrgView` authz-aware to allow access for users with `courses.manage_tags` permission Open

willow

Difficulty 4/5 3-5 days Newbie friendliness 68/100

openedx/openedx-authz#448 · Opened Sep 10, 2026
Add authz validation for `courses.manage_pages_and_resources` to `ProctoredExamSettingsView` Open

willow

openedx/openedx-authz#443 · 1 assignee · Opened Sep 10, 2026
Wrap Proctored Exams Settings links with `courses.manage_pages_and_resources` permission Open

willow

openedx/openedx-authz#442 · 1 assignee · Opened Sep 10, 2026
Fix review endpoints to allow access for users with `courses.view_library_updates` permission Open

willow

openedx/openedx-authz#441 · 1 comment · 1 assignee · Opened Sep 10, 2026
Provide a typed exception surface (AuthzError hierarchy) at the public API boundary Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 35/100

openedx/openedx-authz#439 · Opened Sep 9, 2026
define REST API ownership and visibility extension ADRS Open

willow

openedx/openedx-authz#436 · 1 assignee · Opened Sep 2, 2026
Split REST API views by domain ownership and package layout Open

willow

openedx/openedx-authz#435 · 1 assignee · Opened Sep 2, 2026
Update Sandbox for Phase 2 Testing Open

willow

openedx/openedx-authz#434 · 1 assignee · Opened Sep 2, 2026
Plugin Discovery Mechanism and Aggregation Open

willow

openedx/openedx-authz#433 · 1 assignee · Opened Sep 2, 2026
Implement extraction and translation of static YAML authz metadata (Internationalization) Open

willow

openedx/openedx-authz#432 · 1 assignee · Opened Sep 2, 2026
Course Editor is not allowed to edit the component's content just the title Open

willow

openedx/openedx-authz#418 · 1 comment · 1 assignee · Opened Aug 25, 2026
Studio search (Meilisearch) does not include courses for authz-only users Open

willow

openedx/openedx-authz#417 · 1 assignee · Opened Aug 24, 2026
Frontend: Administrative Console integration Open

willow

openedx/openedx-authz#415 · 1 assignee · Opened Aug 21, 2026
Role-agnostic API behavior Open

willow

openedx/openedx-authz#414 · 1 comment · 1 assignee · Opened Aug 21, 2026
Role and permission metadata (Catalog API) Open

willow

openedx/openedx-authz#413 · 1 assignee · Opened Aug 21, 2026
Migrate Existing Core Roles and Permissions to Declarative YAML Open

willow

openedx/openedx-authz#411 · 1 assignee · Opened Aug 21, 2026
AuthZ Extensibility in Willow: Enable Roles and Permissions Contributed by Modules Open

willow

Difficulty 5/5 Over a week Newbie friendliness 35/100

openedx/openedx-authz#408 · Opened Aug 21, 2026
Frontend: Implement grouped roles & permissions view in Admin Console Open

willow

openedx/openedx-authz#407 · 1 assignee · Opened Aug 21, 2026
Task - Add the `courses.view_library_updates` permission Open

willow

Difficulty 4/5 3-5 days Newbie friendliness 25/100

openedx/openedx-authz#386 · 1 comment · Opened Aug 11, 2026
Task - Implement Course Access & Content Open

willow

openedx/openedx-authz#383 · 1 assignee · Opened Aug 10, 2026
Remove the waffle-flag-states endpoint in Willow Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

openedx/openedx-authz#377 · Opened Jul 29, 2026
Phase 4: Implement the First Instructor Dashboard Slice Open

willow

Difficulty 5/5 Over a week Newbie friendliness 25/100

openedx/openedx-authz#376 · Opened Jul 28, 2026
Phase 3: Define the Next Expansion Model Using Instructor Dashboard as the First Target Open

willow

Difficulty 5/5 Over a week Newbie friendliness 25/100

openedx/openedx-authz#375 · Opened Jul 28, 2026
Phase 2: Complete Course Editor and Course Auditor Open

willow

Difficulty 5/5 Over a week Newbie friendliness 15/100

openedx/openedx-authz#374 · Opened Jul 28, 2026
Phase 1: Stabilize the Current Authoring AuthZ Experience Open

willow

Difficulty 5/5 Over a week Newbie friendliness 20/100

openedx/openedx-authz#373 · Opened Jul 28, 2026
Make backend endpoints aware of the course authoring flag Open

willow

Difficulty 4/5 3-5 days Newbie friendliness 25/100

openedx/openedx-authz#363 · 1 comment · Opened Jul 20, 2026
Invert dependency direction: reduce openedx-authz's coupling to openedx-platform internals Open

willow

Difficulty 5/5 Over a week Newbie friendliness 38/100

openedx/openedx-authz#360 · Opened Jul 13, 2026
feat: properly implement staff/superuser listing and filtering in assignments API Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

openedx/openedx-authz#347 · 1 reaction · Opened Jun 29, 2026
Documentation Verawood Open

openedx/openedx-authz#336 · 2 comments · 2 assignees · Opened Jun 9, 2026
Design: How it looks like the Studio views when I dont have permissions Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

openedx/openedx-authz#335 · Opened Jun 9, 2026
Turn on "authz.enable_course_authoring" by default Open

willow

openedx/openedx-authz#327 · 2 comments · 1 assignee · Opened Jun 3, 2026
EPIC - Extensibility Foundation (RBAC AuthZ) Open

willow

Difficulty 5/5 Over a week Newbie friendliness 25/100

openedx/openedx-authz#326 · Opened Jun 3, 2026
Deprecate Library Roles and Permissions in edx-platform Open

willow

Difficulty 4/5 3-5 days Newbie friendliness 48/100

openedx/openedx-authz#325 · 1 comment · Opened Jun 3, 2026
Task - implement library updates Open

willow

openedx/openedx-authz#319 · 4 comments · 1 assignee · Opened Jun 2, 2026
TC-00575: Evaluate public library visibility for all Studio roles (toggle reuse) Open

willow

Difficulty 4/5 3-5 days Newbie friendliness 48/100

openedx/openedx-authz#310 · 1 comment · Opened May 29, 2026
Spike: Define authz initial requirements for Extensibility MVP Open

openedx/openedx-authz#308 · 3 comments · 1 assignee · Opened May 28, 2026
Bug: load_policies management command path handling Open

openedx/openedx-authz#306 · 1 assignee · Opened May 28, 2026
Epic: Hardening pass and fixes Open

openedx/openedx-authz#305 · 1 assignee · Opened May 28, 2026
Bug: Assignment rollback doesn't invalidate in memory cache Open

openedx/openedx-authz#304 · 1 assignee · Opened May 28, 2026
Bug: REST API mixed namespace PUT throws a 500 Open

openedx/openedx-authz#303 · 1 assignee · Opened May 27, 2026
Bug: get_subclass_by_namespaced_key doesn't validate Open

openedx/openedx-authz#302 · 1 assignee · Opened May 27, 2026
Bug: Roles returned as Users from `get_subjects_for_role_in_scope` Open

openedx/openedx-authz#301 · 1 assignee · Opened May 26, 2026
Design: Review Verawood test sheet (UX/UI) Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

openedx/openedx-authz#300 · Opened May 25, 2026
Design: Audit Course Authoring Permissions Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

openedx/openedx-authz#299 · 3 comments · Opened May 25, 2026
Should we also return org-level and/or platform-level scopes in /scopes? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

openedx/openedx-authz#296 · Opened May 21, 2026
Task - Audit Authoring Views for Permission Edge Cases Open

openedx/openedx-authz#286 · 3 comments · 1 assignee · Opened May 8, 2026

openedx/openedx-authz

Get new issues in your inbox