The collaboration dialog will seemingly allow you to grant a student access to a non-student widget (that's not in Guest Mode) if that student also has the support role. The dialog can be saved without error, and the API does not return a permissions error or it is not acted upon by the client. However, the permission update doesn't actually "stick": it's not updated in the database and refreshing the page will show that the user was not actually added.
Ideally we handle this situation more gracefully, likely by continuing to enforce the student role limitations despite the user being support.
The collaboration dialog will seemingly allow you to grant a student access to a non-student widget (that's not in Guest Mode) if that student also has the support role. The dialog can be saved without error, and the API does not return a permissions error or it is not acted upon by the client. However, the permission update doesn't actually "stick": it's not updated in the database and refreshing the page will show that the user was not actually added.
Ideally we handle this situation more gracefully, likely by continuing to enforce the student role limitations despite the user being support.