Make courses visible to faculty members
Based on request from teachers, a faculty member should have read access to all course content in A+. This is useful especially for people responsible of study programs, but also to teachers for planning courses and their relationships to other courses. To enable this A+ should request an additional attribute, eduPersonAffiliation, from Haka and store it as part of UserProfile. This attribute can then be used in revised visibility rules (i.e., show courses to users with 'faculty' role).
Teachers should not, however, be able to see student names in other courses. Therefore we need to implement also #533 (name pseudonymization) before / together with this issue.
Subtasks:
- [ ] Add eduPersonAffilition to requested attributes in Haka resource registry (who has access to do this?), and to related Shibboleth configurations. Check first in minus that the provided values are as expected. Test also with Aalto teachers from different departments, and also with TUNI teachers.
- [ ] Add a new 'role' field to UserProfile model, to which the above Haka value is copied on login
- [ ] Implement #533
- [ ] Modify visibility rules
Note that this would allow faculty visibility across department boundaries and also between universities. According to steering group discussion this is ok, and perhaps even useful.
An additional discussion point is, whether also TAs on their own course should actually see pseudonymized names instead of real ones. (I'm inclining towards thinking that they probably should --PS) Something to be discussed with teachers.
AFAIK, the idea was that faculty would only have read access to the course material and would not see students or their submissions. Pseudonymization shouldn't then be needed. I'm not sure if the faculty should be allowed to make submissions or see model answers (if so, only after deadline or always?).
I would imagine that being able to read the materials should be good enough, for a start at least. If some need later emerges for “random” faculty to make submissions or see model answers (and that cannot be fixed by granting course-specific rights), that could be a separate follow-on issue.