We are working on a requirement to integrate a third-party accessibility tool in our Brightspace environment. This integration requires loading a custom JavaScript file across course pages.

We would like to confirm whether Brightspace supports adding custom JavaScript at the theme level (for example, via the Theme Editor or any configuration setting).

Specifically, could you please clarify:

• Whether custom JavaScript can be enabled in the Brightspace theme
• If there is any configuration or supported method to include external JavaScript globally
• Any security restrictions or limitations associated with this
• Recommended alternatives if direct JavaScript injection is not supported

Our instance details are as follows:

• Brightspace URL: https://syllaworks.d2l-partners.brightspace.com
• Organization: Syllaworks

For context, this request is related to integrating an accessibility tool that requires frontend script execution.

We would appreciate your guidance on the supported approach.

Thank you for your assistance.

Best regards,
Kishan Kumar Yadav
Sr. Software Developer

Based on the documentation, it would appear that the only thing that should change is instead of using the GET verb, it should instead use DELETE. However, when trying to do this, it returns a 403 Forbidden error, despite using an administrator account and ensuring that the Role Permissions allowed for file creation and deletion.

Is there something I'm missing? I note that the documentation references JSON Parameters: DeleteFile -Delete file properties, although it doesn't actually provide any reference as to what this body should contain.

Thanks in advance!

Currently, the API calls within the widget function correctly when executed by a Super Admin, but they fail when initiated by a Module Leader.

Which specific roles and permissions in Brightspace need to be adjusted to allow the Module Leader to toggle this deployment via the API, without granting them full administrative access to the Tool Deployment area at the Org Unit level?

Reflection

📓 Consider the following: What type of digital media do you create or consume most — and why?

I don't want to link out to a survey for the response, but would love to have students write directly on the lesson page. I do not want this to be an assignment that teachers have to review/grade.

From AY26 Semester 1, NYP will implement a new co‑marking policy where Class Progress (%) contributes to students’ raw module grades:

• ≥70% → +2%
• 50–69% → +1%
• <50% → 0%

This applies to School of Business, School of IT, and School of Applied Science, affecting >2,700 students.

Module Leaders are required to finalise Class Progress outcomes by Week 17 (Friday, 5:00 PM). Verification and moderation will take place from Week 19 onwards.

Issue / Impact

Currently, Class Progress is only viewable via a dashboard in Brightspace:

• No option to download or export student-level Class Progress data
• Difficult to review all students holistically
• High verification and audit risk, as Class Progress is dynamic and continues updating based on student LMS activity
• Recorded scores in Week 17 may differ from values seen during later moderation

At scale (>2,700 students), manual recording or screenshots are not feasible and error‑prone.

Request

Preferred solution:
Enable a download/export function for Class Progress:

• All students in a module
• Excel (.xlsx) format
• Overall Class Progress %
• (If possible) timestamp/snapshot date

This file will serve as the official reference for grading, verification, and moderation.

If not feasible:
Please advise any system-supported workaround that allows reliable capture of Class Progress at a fixed point in time.

Business Impact

• Affects multiple schools and thousands of students
• Direct impact on grading accuracy, verification, and academic governance
• Urgent requirement before AY26S1 week 17 collection of result

We have developers here that are using mainly SCORM/xAPI objects to develop content. They have asked for a report that could show when each object in each course has been updated last.

I can find the objects in the ScormObjects dataset. This dataset gives me these columns:

With this they can now that ActivityX (Title) has been created in CourseY (OrgUnitId) on Date (LastModified), by Person (LastModifiedBy). The challenge with this is that the same title is often used in multiple courses, so it requires a lot of filtering to get to a result that is still pretty messy. The Dev team has told me that when they upload the objects, they have to use a .zip file and they'd rather have a report that shows when the files have been last uploaded.

I can find that information about the uploads in the MediaObjects dataset, which gives me these columns:

With that they can know that file12345.zip (Title) has been updated 5 times (RevisionCount), and the last revision was on this date (LastModified). My challenge is that I can't seem to find a way to find a link between both datasets to be able to produce a report that would show when a file was uploaded and which object in which course was created with what file, i.e. file12345.zip created ActivityX. In the ScormObjects dataset, title is the title given to the activity in the course and in MediaObjects it's the name of the file. I initially hoped that ScormObjectId from ScormObjects would be the same as ContentId from MediaObjects but it's not.

I went through a lot of the data hub documentation looking at multiple database schemas, but I can't seem to find away to link those two pieces of information. I am hoping someone here is smarter than I am! 😀 I mean, I know a lot of people are probably smarter than I am, I just hope they will read this post and have an answer! 😉 If you took the time to read this, I thank you!

Have an excellent day.

Mike

BrightspaceAPI Documentation : OAuth 2 authentication — Developer Platform (February 2026)

Callback URL:   https://lms-oauth2-staging.thecoursekey.com/authorize & also tried using

https://oauth.pstmn.io/v1/callback and https://oauth.pstmn.io/v1/browser-callback

Auth URL : https://auth.brightspace.com/oauth2/auth

Access TokenURL : https://auth.brightspace.com/core/connect/token

Client ID: ****

Client Secret: ***

Scope :content: api:*:* content:*:* core:*:* datahub:*:* discussions:*:* enrollment:*:* grades:*:* organizations:*:* orgunits:*:* outypes:*:* quizzing:*:* reporting:*:* users:*:*

Error:

{"error":"invalid_request","error_description":"Invalid redirect_uri: https://oauth.pstmn.io/v1/browser-callback","rfc6749_reference":"4.1.2.1, 4.2.2.1"}

{"error":"invalid_request","error_description":"Invalid redirect_uri: https://oauth.pstmn.io/v1/callback","rfc6749_reference":"4.1.2.1, 4.2.2.1"}

Screenshotof the Postman Create Collection Interface:

Now, if we have to find this, we have to select a few filters, jump a few hoops and even then it is at the bottom of the page.  (please see screen shot below)

Can we have this automatically displayed on the top of the grading page where everyone is listed – graded and ungraded?

I am sure other faculty will also find this useful, even if they never asked for it.

Other LMS like Moodle allow filtering very easily on the listed page. But nothing beats an automatic counter.

Limitation:

 Each topic requires a separate agent setup.

Suggestion:

 Allow the creation of an agent based on overall content completion (e.g. <50%), so that learners who have not completed at least half of the content automatically receive a reminder email.

Limitations:

1. No data bar visualisation for % completed
2. Cannot sort % completed by user
3. Cannot export the content report by user to Excel

Suggestions:

Add data bar visualisation for % completed, enable sorting of % completion by user, and enable export by user to Excel.

 Admin Number and Class Section are not shown, and students who have not started the SCORM are excluded.

Suggestion:

 Include Admin Number, Class Section, and display all enrolled students (including those marked as “Not Started”) to ensure complete and accurate analytics.

/d2l/api/lp/(version)/(orgUnitId)/managefiles/file/upload

I'm including the required headers (with the actual token where the placeholder is):

{ 'Authorization': 'Bearer <TOKEN>',  'X-Upload-Content-Type': 'text/csv',  'X-Upload-Content-Length': '530',  'X-Upload-File-Name': 'upload_test.csv'}

However, I'm getting the following error: 416 Requested Range Not Satisfiable

And response.text reads:

{"detail":"The page cannot be displayed because the request range was not satisfiable."}

I can find no information about this error on the community (or anywhere else online). Does anyone have insight?

I have noticed a cheating method student's use when the quizzes are ran under Lockdown browser. Let's say a student starts to write the quiz under lockdown browser. It's funny it also possible to do a quiz-re-entry to the same quiz, using the same login when the student is writing the exam. The student doesn't have to exit the quiz even. That means there are two logins writing the same quiz at the same time under same credentials. It is not even flagged anywhere and I couldn't discover any way to prevent it. The only way to find it is going through logs. Is there any way to prevent a second entry to the quiz when one is active ? Don't even allow it from same ip address, because someone in the same ip address can also helps the student in cheating. Seems like it is a serious bug.