Implement one role that grants a single permission, to validate enforcement and debug authorization behavior in isolation.
We could for example, implement a permission for the Advanced Settings section of course authoring, in that case, the following changes will be needed:
- Define permission and role on openedx-authz
- Modify endpoint in edx-platform so it validates for that permission (behind the feature flag)
- Modify frontend-app-authoring to validate for that permission (and feature flag), and hide that menu item.