fix api sis id permissions

fixes CNVS-13433

test plan
 - you should not be able to see sis_id if you do
   not have permissions to
 - test for sections and courses

Change-Id: I983825e2bd2ea76a1c7300cee3be7859a5e4f5d4
Reviewed-on: https://gerrit.instructure.com/35898
Reviewed-by: Nick Cloward <ncloward@instructure.com>
Tested-by: Jenkins <jenkins@instructure.com>
QA-Review: Jeremy Putnam <jeremyp@instructure.com>
Product-Review: Rob Orton <rob@instructure.com>
source course copy validator permission

fixes: CNVS-13438

Changed the call to grants_rights? to grants_right? since there is only
one permission being checked.

Test Plan:

  - Setup a course where you do not have manage rights.
  - Try to copy the course and you should get an error:
    You are not allowed to copy the source course.
  - Give yourself manage rights to the course.
  - You should be able to copy the source course as normal.

Change-Id: Ib19757158f7a3e28df3b3e6e68ade8d08ea7dba0
Reviewed-on: https://gerrit.instructure.com/35896
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Brian Palmer <brianp@instructure.com>
QA-Review: August Thornton <august@instructure.com>
Product-Review: Nick Cloward <ncloward@instructure.com>
profile: fix valid page views context

fixes CNVS-13451

test plan:
  * enable page view storage in cassandra
  * open Canvas
  * click "Settings", in the top right
  * verify that the page renders successfully

Change-Id: Ia4193f59e41f6993b61a05bbb853a8e601285d8f
Reviewed-on: https://gerrit.instructure.com/35950
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Anthus Williams <awilliams@instructure.com>
QA-Review: August Thornton <august@instructure.com>
Product-Review: Braden Anderson <banderson@instructure.com>
migration lint for instance vs class migration methods

self.up works in rails2 and rails3, but up only works in rails3+

also tag the switchman migrations as RAILS3 only, now that they actually
run in rails2

Change-Id: I768c8e657e86de6504a40444d127e2d875ce6934
Reviewed-on: https://gerrit.instructure.com/35390
Tested-by: Brian Palmer <brianp@instructure.com>
Reviewed-by: Cody Cutrer <cody@instructure.com>
Product-Review: Brian Palmer <brianp@instructure.com>
QA-Review: Brian Palmer <brianp@instructure.com>
spec: fix common_cartridge_1_3_spec for qti-disabled builds

Change-Id: I13b31404db0927f8833bdabb5765d66be910b1f4
Reviewed-on: https://gerrit.instructure.com/35958
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Jeremy Stanley <jeremy@instructure.com>
Product-Review: Jeremy Stanley <jeremy@instructure.com>
QA-Review: James Williams  <jamesw@instructure.com>
support ?user_id in list admins endpoint

fixes CAT-225

test plan:
* GET /api/v1/accounts/:account_id/admins?user_id[]=123
* hit the above endpoint for an account with admins.
  change the 123 user_id to the id of a user with admin rights.
* verify that the result is just the admin user for that user
* hit the same endpoint with some nonadmin user
* verify that the result is []
* verify that if you send in multiple user_ids, you receive
  admins for all those user_ids
  example:
  GET /api/v1/accounts/:account_id/admins?user_id[]=1&user_id[]=2
  should return admins for that account_id with user_id's 1 or 2

Change-Id: I533135d80dfbe359d96f750e71a59fe714a67e98
Reviewed-on: https://gerrit.instructure.com/35888
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Dave Donahue <ddonahue@instructure.com>
Product-Review: Marc LeGendre <marc@instructure.com>
QA-Review: Marc LeGendre <marc@instructure.com>
assessment question bank migration content selection

test plan:
* should be able to select question banks and quizzes
 separately for migrations in any combination, for
 any package type

closes #CNVS-8526 #CNVS-13333

Change-Id: I566ab00f906369c3c28848b9d8985e7965378d1d
Reviewed-on: https://gerrit.instructure.com/35354
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Jeremy Stanley <jeremy@instructure.com>
QA-Review: Clare Strong <clare@instructure.com>
Product-Review: Hilary Scharton <hilary@instructure.com>
add total number of students to ember message students dialog

fixes CNVS-13153

test plan:
  - enable 'new quiz stats' flag
  - as a teacher
    - create a quiz
    - visit the quiz
    - the menu item for messaging a student has been adjusted to say
      "Message Students Who..."
    - click on this option
    - it should show the list of students who have taken the quiz up to 10
      stents. If more than 10 students are available, it should say
      "and {number} more students"
    - switching recipients between students who have taken the quiz, and students
      who have not taken the quiz should work. It should resize the dialog to
      allow for more room if more students are listed.
    - entering a message should send successfully
    - if you attempt to send the message with no message, the modal dialog will
      close and a warning message will tell you it didn't send

Change-Id: I964de663a5b84daaf5a723694e975eaa147505d7
Reviewed-on: https://gerrit.instructure.com/35870
Tested-by: Jenkins <jenkins@instructure.com>
Reviewed-by: Jason Madsen <jmadsen@instructure.com>
QA-Review: Trevor deHaan <tdehaan@instructure.com>
Product-Review: Derek DeVries <ddevries@instructure.com>