fix(programming-annotations): fix student being able to see unpublish…

…ed annotations

- added filtering for only published posts is a user cannot grade
- previously unpublished postIds were sent to students
- they should not have been able to see this postId, this resulted in frontend crashes as the erroneously sent postId is not present in json.posts

app/views/course/assessment/answer/programming/_annotations.json.jbuilder

@@ -1,13 +1,16 @@
 # frozen_string_literal: true
-
 json.annotations programming_files do |file|
   json.fileId file.id
   json.topics(file.annotations.reject { |a| a.discussion_topic.post_ids.empty? }) do |annotation|
     topic = annotation.discussion_topic
     next unless can_grade || !topic.posts.only_published_posts.empty?
 
     json.id topic.id
-    json.postIds topic.post_ids
+    if can_grade
+      json.postIds topic.post_ids
+    else
+      json.postIds topic.posts.only_published_posts.ids
+    end
     json.line annotation.line
   end
 end