edx-platform
edx-platform copied to clipboard
fix: studio submit handler (olive backport)
This solves https://2u-internal.atlassian.net/browse/TNL-10162 for olive. Backport to Nutmeg also coming. You can see the change in master here: https://github.com/openedx/edx-platform/pull/31218
It appears that it’s possible for a student with no special studio access rights to POST to the studio_submit_edits xblock handler on the CMS with no restrictions. This is what we fix here.