openfun / marsha

:clapper: An opensource LTI Learning Content Management System (LCMS)
MIT License
107 stars 24 forks source link

Force filtering queryset on current related object in each viewset #2386

Closed lunika closed 1 year ago

lunika commented 1 year ago

Purpose

Every viewset managing a resource related to an other (thumbnail -> video, classroom documents -> classroom) are now accessible using nested URL and we have no control anymore on the current resource because the JWT token is based on the playlist on a LTI context. Every queryset must be filtered using the current related resource in the url.

Proposal