403 error on canvas editor page for "content_editor" role with "Administer code components" and "Administer content templates" permissions

Overview

A user role content_editor is assigned the permissions Administer code components and Administer content templates. However, when a user with this role attempts to visit the canvas editing page a 403 Forbidden error is encountered, preventing access to the editor.

The backend (BE) permissions appear correctly set, but the frontend (FE) does not allow the user to load the editor.

Steps to Reproduce

1. Create a user role named content_editor.
2. Assign the following permissions to the role:
   • Administer code components
   • Administer content templates
3. Log in with a user assigned the content_editor role.
4. Visit /canvas/editor/canvas_page/[PAGE_ID], such as /canvas/editor/canvas_page/1.
5. Observe that a 403 Forbidden error is displayed instead of the editor.

Expected Result:

A user with the appropriate backend permissions should be able to load the canvas editor page (even if certain JS/frontend features are not available).

Proposed resolution

User interface changes