Skip to content

Enable scratch endpoint#839

Draft
zetter-rpf wants to merge 3 commits into
mainfrom
enable-scratch-endpoint
Draft

Enable scratch endpoint#839
zetter-rpf wants to merge 3 commits into
mainfrom
enable-scratch-endpoint

Conversation

@zetter-rpf
Copy link
Copy Markdown
Contributor

@zetter-rpf zetter-rpf commented May 28, 2026

Status

Todo

  • Update tests to work with missing authorize! calls
  • Add in check when creating projects that scratch is enabled for the school

Points for consideration:

  • Security
  • Performance

What's changed?

Description of what's been done - bullets are often best

Steps to perform after deploying to production

If the production environment requires any extra work after this PR has been deployed detail it here. This could be running a Rake task, a migration, or upgrading a Gem. That kind of thing.

This update schools endpoint isn't used, and there were no
requests to it  the last 30 days.

We've chosen to limit the params so we don't get any unexpected
behaviour, but can add old ones back in if we want to allow
school owners to update them in the future.

We've also removed the 422 test as can't seem to make a similar failing test.

We've also checked the abilities and only school owners can update
the school, but owners, teachers and students can view it.
We should check that a user can show and update projects before allowing them to do so
When looking at these controllers I noticed that we were still skipping authorization even though we now send the user headers with the requests. We now have authorization on tall the endpoints s this can be removed
@cla-bot cla-bot Bot added the cla-signed label May 28, 2026
@github-actions
Copy link
Copy Markdown

Test coverage

SimpleCov coverage data was unavailable for this run.
Run: https://github.com/RaspberryPiFoundation/editor-api/actions/runs/26585963405

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant