Merge pull request #978 from openedx/cag/block-instructors

feat: allow to block instructor access

tutoraspects/plugin.py

@@ -368,6 +368,7 @@
         # course cache anyway.
         ("SUPERSET_USER_PERMISSIONS_CACHE_TIMEOUT", 120),
         ("SUPERSET_BLOCK_STUDENT_ACCESS", True),
+        ("SUPERSET_BLOCK_INSTRUCTOR_ACCESS", False),
         # This setting allows Superset to run behind a reverse proxy in HTTPS and
         # redirect to the correct http/s based on the headers sent from the proxy.
         # By default it is on if Caddy is enabled, but it can be set separately in

tutoraspects/templates/aspects/apps/superset/pythonpath/openedx_sso_security_manager.py

@@ -181,6 +181,8 @@ def _get_user_roles(self, username, locale):
             # the course permissions cache if necessary by logging out and back in.
             courses = self.get_courses(username, force=True)
             if courses:
+                if {{ SUPERSET_BLOCK_INSTRUCTOR_ACCESS }}:
+                    raise Exception(f"Instructor {username} tried to access Superset")
                 return ["instructor", f"instructor-{locale}"]
             else:
                 roles = self.extra_get_user_roles(username, decoded_access_token)