canvas-lms/app
August Thornton bdcc46f8d3 improve permission checks on SubAccountsController#index
refs LS-2136
fixes FOO-2728
flag = none

Test plan:
• Create a sub-account with at least one child sub-account
• Add a user to the sub-account as an admin with the permission
  “Account-level settings - manage” disabled
• As the admin
   • See that the sub-accounts tab does not display
   • Direct navigate to /accounts/####/sub_accounts anyways
   • See that the page will 401 with Access Denied
• Verify the sub_account index page loads with
  "Account-level settings - manage" enabled

Change-Id: Ief6a585173600efe1b583fafe8aa236500bcdb49
Reviewed-on: https://gerrit.instructure.com/c/canvas-lms/+/289644
Tested-by: Service Cloud Jenkins <svc.cloudjenkins@instructure.com>
Reviewed-by: Jacob Burroughs <jburroughs@instructure.com>
QA-Review: August Thornton <august@instructure.com>
Product-Review: August Thornton <august@instructure.com>
2022-04-14 15:59:14 +00:00
..
coffeescripts remove plugin symlinks 2021-05-20 17:21:08 +00:00
controllers improve permission checks on SubAccountsController#index 2022-04-14 15:59:14 +00:00
graphql add granular permissions for managing course content 2022-04-11 20:53:27 +00:00
helpers refactor: normalize tool loading in modules index 2022-04-11 20:02:30 +00:00
messages Update notification link to direct to assignment page 2022-03-24 17:56:31 +00:00
middleware Improve Sentry APM sampling decisions 2022-02-05 00:17:52 +00:00
models Move Mastery Path to an account/course setting 2022-04-13 22:26:57 +00:00
observers Announce MasterMigration completed on LiveEvents 2022-03-24 20:10:38 +00:00
presenters add granular permissions for managing course content 2022-04-11 20:53:27 +00:00
serializers expose launch url in AGS Line Item API 2022-03-15 22:26:05 +00:00
stylesheets Move Mastery Path to an account/course setting 2022-04-13 22:26:57 +00:00
views Move Mastery Path to an account/course setting 2022-04-13 22:26:57 +00:00