When an admin requests the CSV file of a course's statistics from /a/{COURSE-ID}/statistics/ascsv?tags={COURSE-TAG} they instead get a HTTP 403.
The check causing it (trix/trix_admin/views/statistics.py) doesn't seems to have changed recently so not sure why it stopped working, but my guess is the problem is caused by how the course tags are parsed.
When an admin requests the CSV file of a course's statistics from
/a/{COURSE-ID}/statistics/ascsv?tags={COURSE-TAG}
they instead get a HTTP 403.The check causing it (trix/trix_admin/views/statistics.py) doesn't seems to have changed recently so not sure why it stopped working, but my guess is the problem is caused by how the course tags are parsed.