Fix UI bugs, admin bulk upload limits, test ingestion bugs, and reset demo users

backend/main.py

@@ -236,9 +236,13 @@ async def bulk_register_students(file: UploadFile = File(...), session: Session
     decoded = content.decode('utf-8-sig')
     csv_reader = csv.DictReader(io.StringIO(decoded))
     
+    rows = list(csv_reader)
+    if len(rows) > 500:
+        raise HTTPException(status_code=400, detail="Maximum limit of 500 users per bulk registration exceeded.")
+        
     results = []
     
-    for row in csv_reader:
+    for row in rows:
         email = row.get("email", "").strip()
         name = row.get("name", "").strip()
         phone = row.get("phone", "").strip()
@@ -436,7 +440,7 @@ def login(payload: LoginPayload, session: Session = Depends(get_session)):
 # --- CBT ENGINE ---
 
 @app.get("/api/tests", response_model=List[models.Test], tags=["CBT Engine"])
-def list_active_tests(exam_pattern: Optional[str] = None, type: Optional[str] = None, session: Session = Depends(get_session), current_user: models.User = Depends(require_tier([models.TierEnum.PRO, models.TierEnum.AI_COACH]))):
+def list_active_tests(exam_pattern: Optional[str] = None, type: Optional[str] = None, session: Session = Depends(get_session), current_user: models.User = Depends(get_current_user)):
     query = select(models.Test).where(models.Test.is_active == True)
     if exam_pattern:
         if exam_pattern == 'JEE_NEET':
@@ -450,14 +454,14 @@ def list_active_tests(exam_pattern: Optional[str] = None, type: Optional[str] =
     return session.exec(query).all()
 
 @app.get("/api/tests/{test_id}", response_model=models.Test, tags=["CBT Engine"])
-def get_test_by_id(test_id: UUID, user_id: Optional[UUID] = None, session: Session = Depends(get_session), current_user: models.User = Depends(require_tier([models.TierEnum.PRO, models.TierEnum.AI_COACH]))):
+def get_test_by_id(test_id: UUID, user_id: Optional[UUID] = None, session: Session = Depends(get_session), current_user: models.User = Depends(get_current_user)):
     test = session.get(models.Test, test_id)
     if not test:
         raise HTTPException(status_code=404, detail="Requested examination structure not found.")
     return test
 
 @app.get("/api/tests/{test_id}/questions", response_model=List[models.Question], tags=["CBT Engine"])
-def get_questions_by_test_id(test_id: UUID, session: Session = Depends(get_session), current_user: models.User = Depends(require_tier([models.TierEnum.PRO, models.TierEnum.AI_COACH]))):
+def get_questions_by_test_id(test_id: UUID, session: Session = Depends(get_session), current_user: models.User = Depends(get_current_user)):
     test = session.get(models.Test, test_id)
     if not test:
         raise HTTPException(status_code=404, detail="Requested examination structure not found.")
@@ -498,7 +502,7 @@ def get_question_by_id(question_id: UUID, session: Session = Depends(get_session
     return question
 
 @app.post("/api/attempts/submit", response_model=models.Attempt, tags=["CBT Engine"])
-def submit_test_attempt(payload: Dict[str, Any], session: Session = Depends(get_session), current_user: models.User = Depends(require_tier([models.TierEnum.PRO, models.TierEnum.AI_COACH]))):
+def submit_test_attempt(payload: Dict[str, Any], session: Session = Depends(get_session), current_user: models.User = Depends(get_current_user)):
     user_id = payload.get("user_id")
     source_type_raw = payload.get("source_type", "Test")
     source_id = payload.get("source_id")