CourseEdition creation button is shown to edition coordinators
- Give a short description of the bug
The "New Course Edition" button on the /admin/courses/{id} page is shown to all coordinators: permissions are configured improperly.
- Explain the steps you took to trigger the bug
I gave a user who is not a programme coordinator a course edition coordinator role, logged in as that user, and navigated to the course management page.
- What is the expected behavior?
The "New Course Edition" button is not shown.
- What is the actual behavior?
The "New Course Edition" button is displayed and leads to a 403 Forbidden page.