Merge pull request #6132 from edx/sanchez/fix_age_verification

Only allow users who turned 13 before this year began to opt in.

common/djangoapps/user_api/api/profile.py

@@ -191,7 +191,7 @@ def update_email_opt_in(username, org, optin):
     profile = UserProfile.objects.get(user=user)
     of_age = (
         profile.year_of_birth is None or  # If year of birth is not set, we assume user is of age.
-        datetime.datetime.now(UTC).year - profile.year_of_birth >=  # pylint: disable=maybe-no-member
+        datetime.datetime.now(UTC).year - profile.year_of_birth >  # pylint: disable=maybe-no-member
         getattr(settings, 'EMAIL_OPTIN_MINIMUM_AGE', 13)
     )
 

common/djangoapps/user_api/tests/test_profile_api.py

@@ -105,8 +105,11 @@ class ProfileApiTest(TestCase):
         # Check that a 32-year old can opt-out
         (32, False, u"False"),
 
-        # Check that someone 13 years old can opt-in
-        (13, True, u"True"),
+        # Check that someone 14 years old can opt-in
+        (14, True, u"True"),
+
+        # Check that someone 13 years old cannot opt-in (must have turned 13 before this year)
+        (13, True, u"False"),
 
         # Check that someone 12 years old cannot opt-in
         (12, True, u"False")