Add additional fields to Content Migrations API

Closes CNVS-29501

Test Plan:
* In a course, create some content migrations by exporting/importing
  course content
* GET /api/v1/courses/:course_id/content_migrations/:id
  using site admin credentials
* The response should contain infomation within an `audit_info` key
* Hit the same endpoint with teacher, student, or other non-site-admin
  credentials
* The API should not contain the extra information and should behave
  as before

Change-Id: Ia121b2ff72e9be553c1de74be2fd259038526dc5
Reviewed-on: https://gerrit.instructure.com/102193
Tested-by: Jenkins
Reviewed-by: Mysti Sadler <[email protected]>
QA-Review: Heath Hales <[email protected]>
Product-Review: Dan Minkevitch <[email protected]>

lib/api/v1/content_migration.rb

@@ -67,6 +67,23 @@ def content_migration_json(migration, current_user, session, attachment_prefligh
         json['migration_type_title'] = plugin.meta[:name].call
       end
     end
+
+    # For easier auditing for support requests
+    if Account.site_admin.grants_right?(current_user, :manage_courses)
+      json[:audit_info] = migration.respond_to?(:slice) &&
+                          migration.slice(:id,
+                                          :user_id,
+                                          :migration_settings,
+                                          :started_at,
+                                          :finished_at,
+                                          :created_at,
+                                          :updated_at,
+                                          :progress,
+                                          :context_type,
+                                          :source_course_id,
+                                          :migration_type)
+    end
+
     json
   end
 

spec/apis/v1/content_migrations_api_spec.rb

@@ -205,6 +205,20 @@
       expect(@migration.migration_issues.first.description).to eq "The file upload process timed out."
     end
 
+    context "Site Admin" do
+      it "should contain additional auditing information for site admins" do
+        course_with_teacher_logged_in(:course => @course, :active_all => true, :user => site_admin_user)
+        json = api_call(:get, @migration_url, @params)
+        expect(json['audit_info']).not_to be_falsey
+      end
+
+      it "should not contain additional auditing information if not site admin" do
+        course_with_teacher_logged_in(:course => @course, :active_all => true, :user => user_with_pseudonym)
+        json = api_call(:get, @migration_url, @params)
+        expect(json['audit_info']).to be_falsey
+      end
+    end
+
     context "User" do
       before do
         @migration = @user.content_migrations.create