[Test failure] <TC-00562> Role filter returns data from incorrect roles

[MaferMazu]

Current behavior

When selecting a specific role in the filter, the system returns data and records belonging to other roles as well.

Example: Filtering by "Course Staff" incorrectly includes data from other unrelated roles in the results.

Expected

The filter should strictly isolate data. When a user selects a specific role (e.g., Course Staff), the list or view must only display information exclusively linked to that selected role, completely omitting data from any other roles.

US

As a user filtering data by role,
I want the system to display only the records associated with the selected role,
So that I can review accurate and relevant information.

[MaferMazu]

The list shown came from https://verawood.demo.edly.io/api/authz/v1/assignments/?orgs=demo, and I think this is because we are taking into account assignments with org "*"(global). - We should fix this in openedx-authz.

Reference: https://github.com/openedx/frontend-app-admin-console/blob/master/src/authz-module/data/api.ts#L178

[MaferMazu]

Yes, we are using the global match for a specific organization. We should refine this more to probably have an exclusive filter.

Another ref: https://github.com/openedx/openedx-authz/blob/main/openedx_authz/api/users.py#L299

[MaferMazu]

I just updated the ticket name so we can track that this is related to a failed RBAC Test (TC-00562).

Verawood test sheet: https://docs.google.com/spreadsheets/d/1j1uDhVIVLwHUfrMLBzx6lM55gYL6i4nUqbzkbLHpaHQ/edit?usp=sharing

[mariajgrimaldi]

Related draft PRs:

openedx/openedx-authz#345
#173