Added security to the monitoring calls - the calls to update a lesson now check that the user either the owner of the lesson or a staff member for the lesson.
Added security to the monitoring calls - the calls to update a lesson now check that the user either the owner of the lesson or a staff member for the lesson. Lessons return for monitoring include both the ones for the user in the staff group and all lessons created by the user. Otherwise it doesn't return lessons that were created by not yet assigned a class. Added learning design id to the DTO - needed by learning client.
Lessons return for monitoring include both the ones for the user in the staff group and all lessons created by the user. Otherwise it doesn't return lessons that were created by not yet assigned a class.
Fixed getAllLessons() to return all the lessons for which the user is in the lesson's staff group. Added organisationID to the basic lesson DTO returned to Flash.