re-enable challenge handling in LessonInfoModel about webgoat

[mayhew64]

@misfir3 @nbaars We need to make this one a priority. We need a RBAC mechanism that is checked for presentation and server side access control.

[misfir3]

presentation side is covered (commit/push/pull pending) ... looking at backing it up on server-side. No hints should be pulled at all on a challenge, correct?

[misfir3]

@nbaars @mayhew64 ... give it a once over. If it passes muster, go ahead and import.

... #98

[mayhew64]

@misfir3 I think we want to perform the check on a role versus a category. I could see other lessons want to disable presentation layer access checks. If it is easy to change to a role, lets do that. If not, we can go with checking the category. I can also see other lessons being in the challenge category and not wanting to have these features disabled.

[misfir3]

Good point. I'll take another look later today (~ 4 PM ET). Should be able to look at your other PR then as well.

[misfir3]

Closing since PR has been completed.

[sreejithbk]

How to disable lesson hints