source-academy / frontend

Frontend of Source Academy, an online experiential environment for computational thinking (React, Redux, Saga, Blueprint)
https://sourceacademy.org
Apache License 2.0
103 stars 167 forks source link

Disable ground control for avengers (non-admin staff) #3031

Closed josh1248 closed 1 month ago

josh1248 commented 3 months ago

Avengers, which are classified as staff, currently have access to ground control: image The buttons to delete a whole assessment, for example, are active, and work (no actual submissions were harmed - this was on a test uploaded assessment). This would be quite dangerous as it means that 1 rogue avenger with ill intent can wipe out all submissions very quickly.

This check should be both a frontend and backend measure. Backend issue at: https://github.com/source-academy/backend/issues/1162