Can't create course as user with course creator access when flag is enabled

[mariajgrimaldi]

Description

When authz.enable_course_authoring is enabled, a non-admin instructor user with course creator access for all organizations is unable to create a course from Studio.

The user can open the New course form and the organization dropdown is populated with available organizations. However, after filling out the course creation form and clicking Create, the POST /course/ request returns a 403.

This suggests that the user is allowed to see/select organizations in the course creation form, but the course creation permission check fails when submitting the form.

Steps to reproduce

1. Enable authz.enable_course_authoring.
2. Log in to Studio as a non-admin instructor user.
3. Grant the user course creator access for all organizations from Django admin.
4. Go back to Studio as the instructor user.
5. Open the New course form.
6. Fill in the course creation fields. Press create.

Expected behavior

The course should be created successfully.

Actual behavior

The course is not created. The POST /course/ request returns a 403 with the following response:

{
  "error": "User does not have the permission to create courses in this organization or course creation is disabled"
}

It only works when the flag authz.enable_course_authoring is off.

[rodmgwgu]

One question, on the steps to reproduce, step 3 means adding it under the Django admin in admin/course_creators/coursecreator/, right?

If that's the case, this is related to what I found here: #353 (comment)

The course_creator_group role doesn't exist in openedx-authz, that's why it's not working.

We would need to either fallback to legacy for this unsupported role, or add the role in authz and the admin console.