test_api.py
26.9 KB
-
Move Discussion API access control checks · 565cdb8e
The checks are now within the Python API instead of the DRF view. This will be necessary for certain operations (like fetching/editing threads) because the relevant course cannot be known until the thread is fetched from the comments service. This commit updates the existing endpoints to fit that pattern.
Greg Price committed