0

Add correct scope for teacher list course work

The current coursework scope
(kClassroomReadOnlyCourseWorkSelfOAuth2Scope) only lets the caller see
course work in classes they are enrolled in. For our use case, teachers
will see course work for classes they teach. This change adds the right
scope for this.

Tested locally.

Bug: 393173196
Change-Id: I86c4184842096ec87d46d7f8b5d7d49ea4ff86a9
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6238000
Reviewed-by: Alex Ilin <alexilin@chromium.org>
Commit-Queue: Benjamin Zielinski <bzielinski@google.com>
Reviewed-by: Vignesh Shenvi <vshenvi@google.com>
Cr-Commit-Position: refs/heads/main@{#1416862}
This commit is contained in:
Benjamin Zielinski
2025-02-06 09:39:05 -08:00
committed by Chromium LUCI CQ
parent 19505f7bf2
commit 0004980453
3 changed files with 5 additions and 0 deletions
ash/webui/boca_ui/provider
google_apis/gaia

@ -244,6 +244,7 @@ ClassroomPageHandlerImpl::CreateRequestSender() {
std::vector<std::string> scopes = {
GaiaConstants::kClassroomReadOnlyRostersOAuth2Scope,
GaiaConstants::kClassroomReadOnlyCoursesOAuth2Scope,
GaiaConstants::kClassroomReadOnlyCourseWorkStudentsOAuth2Scope,
GaiaConstants::kClassroomProfileEmailOauth2Scope,
GaiaConstants::kClassroomProfilePhotoUrlScope,
};

@ -210,6 +210,8 @@ const char kClassroomReadOnlyCoursesOAuth2Scope[] =
"https://www.googleapis.com/auth/classroom.courses.readonly";
const char kClassroomReadOnlyCourseWorkSelfOAuth2Scope[] =
"https://www.googleapis.com/auth/classroom.coursework.me.readonly";
const char kClassroomReadOnlyCourseWorkStudentsOAuth2Scope[] =
"https://www.googleapis.com/auth/classroom.coursework.students.readonly";
const char kClassroomReadOnlyStudentSubmissionsSelfOAuth2Scope[] =
"https://www.googleapis.com/auth/classroom.student-submissions.me.readonly";
const char kClassroomReadOnlyRostersOAuth2Scope[] =

@ -100,6 +100,8 @@ extern const char kClassroomReadOnlyCoursesOAuth2Scope[];
COMPONENT_EXPORT(GOOGLE_APIS)
extern const char kClassroomReadOnlyCourseWorkSelfOAuth2Scope[];
COMPONENT_EXPORT(GOOGLE_APIS)
extern const char kClassroomReadOnlyCourseWorkStudentsOAuth2Scope[];
COMPONENT_EXPORT(GOOGLE_APIS)
extern const char kClassroomReadOnlyStudentSubmissionsSelfOAuth2Scope[];
COMPONENT_EXPORT(GOOGLE_APIS)
extern const char kClassroomReadOnlyRostersOAuth2Scope[];