Enforcement: Course Info tab #487

Permissions

• courses.view_course_info

Endpoints

• CourseMetadataView: course data and enrollment counts.

Notes

• This endpoint also returns the tab list and the user's permissions, so it must keep responding to any user with at least one dashboard permission. Without view_course_info, only the information and count fields are hidden. Define exactly which fields.

Acceptance criteria

• The common criteria from Backend permission enforcement (LMS) #485 are met.
• A user without view_course_info but with another dashboard permission gets a 200 without the Course Info fields.

Blocked by: #486