nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

custom_data access

DanielLim

Some of our Canvas teachers want to know what grade level their students are. Because I don't know of any place to store this data I started adding this data through the /v1/users/{user_id}/custom_data API endpoint. Now I can access student grade levels through the 'People' interface and the 'Gradebook' interface in a particular course.

The problem is I can only seem to access this data as an ADMIN. When teachers try to access this data it seems they don't have the privileges to run the code I've written to access the API endpoint.

Is there any work around for this?

Find more posts tagged with

API

Accepted answers

melodyc_lam

Hey @DanielLim without your code we won't be able to help much, but according to the API endpoint documentation here you have to be an account admin with the "manage users" permission.

I'm assuming you're using the custom JS to call the custom_data endpoint, correct? If so, you could try potentially writing an external script (like in Google App Script) that would remotely do the call for you and return the data, then the rest of the code in your custom JS would process it and present it to the user in the UI. If you try this route, you want to be careful NOT to expose your API key that will be making the call on your behalf.

Hope this (can) help!

All comments

melodyc_lam

Hey @DanielLim without your code we won't be able to help much, but according to the API endpoint documentation here you have to be an account admin with the "manage users" permission.

Hope this (can) help!

dtod

It would be insanely useful if users had permission to their own custom data.

DanielLim

@melodyc_lam - Thank you!

I have no familiarity with Google App Scripts. I just started looking into this and successfully created an app that accesses the relevant Canvas API. I stored the API Key as Script Property so that I don't explicitly use the API Key in the script itself. Do you think this is secure enough? Any advice on this?

My worry with this overall approach, however, is that I still need a secure way of accessing my Google App Script - presumably through another API Key? If so, why not simply do an API call to custom_data using my Canvas API Key?

@dtod users have access to their own custom_data. Outside of this I think only admins have access to that data. Would be nice in certain cases if teachers could have access student custom_data - that's the problem I'm encountering now.

jsimon3

we use the custom_column in gradebook to push custom_data so teachers can view info such as accommodations

Unanswered Questions

Canvas Trusts
At a technical level, if a user exists in two separate Canvas instances, is this a problem a Canvas Trust can address? If so, how? Can you add a trust(ed) login to an existing user account? Most of the (very limited) documentation I've found seems to focus on Trusts operating with enrollments, not users, but it does seem…
Discrepancy between Canvas UI and Server Logs (500/503 Errors)
Hi everyone, I am seeking some insight into how Canvas LMS handles HTTP errors and how they are reflected in the logs versus the user interface. We are currently observing the following behavior in our environment: Log-only errors: We are seeing 500 (Internal Server Error) and 503 (Service Unavailable) errors recorded in…
LTI Variable substitution for Term SIS ID?
I looked through the LTI Variable Substitutions documentation and while there are variable substitutions available for Canvas.term.name and Canvas.term.id (which is the Canvas incremented ID like "104"), I was surprised to see there was no option for Canvas.term.sisSourceId I tried testing other possible variants that may…
Learning Mastery Gradebook: assign_outcome_order API Returns Success But Doesn't Persist Column Order
Summary:The Learning Mastery Gradebook allows drag-and-drop reordering of outcome columns, and this triggers a call to /api/v1/courses/:course_id/assign_outcome_order. The API returns 204 No Content (success), but the column order does not persist after page refresh. Steps to Reproduce: Open Learning Mastery Gradebook for…
Finding the LTIv1.3 IDs for Members of a Course
I'm building a tool for my institution that imports grades from another LTI tool into Canvas so instructors can automate late assignment policies not otherwise supported by Canvas. I'm trying to use the LTIv1.3 ID which is readily available on the LTI-side as a link to the student record on Canvas, but I can't find the ID…