Let offering managers read the offerings catalogue #122

Merged

thatguygriff merged 1 commits from fix/offerings-read-permission into main

2026-07-28 16:07:09 +00:00

Author	SHA1	Message	Date
thatguygriffandClaude Opus 5	0f30f28e92	Let offering managers read the offerings catalogue CI / Tests (PHP 8.1) (pull_request) Successful in 46s Details CI / No Debug Code (pull_request) Successful in 2s Details CI / Tests (PHP 8.2) (pull_request) Successful in 56s Details CI / PHPStan (pull_request) Successful in 2m56s Details CI / Coding Standards (pull_request) Successful in 2m58s Details CI / Tests (PHP 8.3) (pull_request) Successful in 2m41s Details CI / Build Plugin Zip (pull_request) Skipped Details The block editor's group-class picker fetches GET /offerings, whose permission callback only accepted book_lesson — a capability held by students alone. Administrators and instructors editing a page were rejected with a 403 and the picker silently rendered an empty list. Read access now accepts book_lesson or manage_offerings. The listing is unchanged: active offerings only, public ones plus the invite-only classes the caller has been granted, without the e-transfer email. Closes #121 Co-Authored-By: Claude Opus 5 <[email protected]>	2026-07-28 12:54:58 -03:00