Merge pull request #828 from krgauraw/release-4.9.0

Issue #SB-29666 fix: updated config to restrict props

assessment-api/assessment-actors/src/main/scala/org/sunbird/managers/AssessmentManager.scala

@@ -12,6 +12,7 @@ import org.sunbird.graph.nodes.DataNode
 import org.sunbird.graph.utils.NodeUtil
 import org.sunbird.telemetry.logger.TelemetryManager
 import org.sunbird.telemetry.util.LogTelemetryEventUtil
+import org.sunbird.utils.RequestUtil
 
 import scala.concurrent.{ExecutionContext, Future}
 import scala.collection.JavaConversions._
@@ -27,6 +28,7 @@ object AssessmentManager {
 		val visibility: String = request.getRequest.getOrDefault("visibility", "").asInstanceOf[String]
 		if (StringUtils.isNotBlank(visibility) && StringUtils.equalsIgnoreCase(visibility, "Parent"))
 			throw new ClientException(errCode, "Visibility cannot be Parent!")
+		RequestUtil.restrictProperties(request)
 		DataNode.create(request).map(node => {
 			val response = ResponseHandler.OK
 			response.putAll(Map("identifier" -> node.getIdentifier, "versionKey" -> node.getMetadata.get("versionKey")).asJava)

schemas/question/1.0/config.json

@@ -9,6 +9,7 @@
   },
   "restrictProps": {
     "create" : [
+      "status"
     ],
     "update" : [
       "visibility", "code", "status", "mimeType"

schemas/questionset/1.0/config.json

@@ -48,7 +48,8 @@
   "schema_restrict_api": true,
   "restrictProps": {
     "create": [
-      "children"
+      "children",
+      "status"
     ],
     "update": [
       "children",