Skip to content

Commit 9e1bbb4

Browse files
committed
docs: apply feedback
1 parent b6d7fc0 commit 9e1bbb4

1 file changed

Lines changed: 15 additions & 13 deletions

File tree

oeps/best-practices/oep-0066-bp-authorization.rst

Lines changed: 15 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -11,9 +11,9 @@ OEP-66: User Authorization
1111
* - Title
1212
- User Authorization
1313
* - Last Modified
14-
- 2023-10-20
14+
- 2025-12-15
1515
* - Authors
16-
- Hilary Sinkoff (hsinkoff@2u.com), Jeremy Bowman (jbowman@edx.org)
16+
- Hilary Sinkoff (hsinkoff@2u.com), Jeremy Bowman (jbowman@edx.org), Maria F Magallanes (maria.magallanes@edunext.co)
1717
* - Arbiter
1818
- Feanil Patel (feanil@axim.org)
1919
* - Status
@@ -479,6 +479,8 @@ authn data point, but is an accepted way to implement feature specific roles and
479479
It is advisable to be very careful regarding the jwt token header limits if adding a new feature specific
480480
set of roles using this implementation path.
481481

482+
.. _openedx-authz-section:
483+
482484
openedx-authz
483485
-------------
484486

@@ -490,21 +492,15 @@ Currently, openedx-authz only supports the default roles and permissions of cont
490492

491493
For more information, see the `openedx-authz documentation`_ and the `openedx-authz repository`_.
492494

493-
.. _openedx-authz: https://github.com/openedx/openedx-authz
494-
.. _Casbin: https://casbin.org/
495-
.. _openedx-authz documentation: https://github.com/openedx/openedx-authz/blob/main/README.rst
496-
.. _openedx-authz repository: https://github.com/openedx/openedx-authz
497-
498-
content libraries
495+
Content Libraries
499496
------------------
500497

501-
Permission is granted on a Feature, in this case Content Library.
498+
Roles and permissions are granted on a per-library basis for v2 content libraries.
502499

503-
Permission is assigned in the CMS exclusively for providing explicit permission to
504-
view or edit a library in the CMS.
500+
Explicit roles can be assigned through Studio by accessing the library and selecting the "Manage Team" option. This provides granular control over who can view, edit, or administer each content library.
505501

506-
It grants access on a library by library basis and is used for v2 of content libraries
507-
in the CMS.
502+
.. note::
503+
Since Ulmo, these permissions are handled by :ref:`openedx-authz <openedx-authz-section>`.
508504

509505
.. note::
510506
v1 libraries (deprecated) granted access to libraries on a course by course basis
@@ -601,6 +597,11 @@ References
601597

602598
`openedx-authz`_
603599

600+
.. _openedx-authz: https://github.com/openedx/openedx-authz
601+
.. _Casbin: https://casbin.org/
602+
.. _openedx-authz documentation: https://github.com/openedx/openedx-authz/blob/main/README.rst
603+
.. _openedx-authz repository: https://github.com/openedx/openedx-authz
604+
604605
Change History
605606
**************
606607

@@ -609,6 +610,7 @@ Change History
609610

610611
* Update how the content libraries' permissions work to reflect the addition of `openedx-authz`.
611612
* Add `openedx-authz` information.
613+
* `Pull request #760 <https://github.com/openedx/open-edx-proposals/pull/760>`_
612614

613615
2024-01-23
614616
----------

0 commit comments

Comments
 (0)