Projects: set abuse threshold for project assets

[Erin007]

LP-471

In #28455 I increased the project abuse score from 10 to 15 so that a project would need to be reported at least twice by a user (unless they are a verified teacher). However, I did not set the abuse score threshold for project assets. When a project was reported once and had an abuse score of 10, the project would still be shown, but the image thumbnail appeared broken, which was reported as 404s.

This PR increased the abuse score threshold for project assets to 15 as well so that assets with abuse scores of 10 can still be retrieved and won't show as broken thumbnails.

[davidsbailey]

there is a way to share constants programmatically. Please add this constant to shared_constants.rb, and then run cd apps ; grunt exec:generateSharedConstants. if that doesn't work try

`npm bin`/grunt exec:generateSharedConstants

this will make them show up in apps/src/util/sharedConstants.js .

[davidsbailey]

Nice improvement Erin! Looks good to merge after addressing shared constants.

I am seeing one more problematic case to consider -- if my project is featured, and then I add an asset to it, it will be created with an abuse score of 0:

code-dot-org/shared/middleware/helpers/bucket_helper.rb

Line 174 in 382855f

def create_or_replace(encrypted_channel_id, filename, body, version = nil, abuse_score = 0)

possible solution: when creating an asset, look up the project abuse score and then pass that score as an already-defined optional parameter to create_or_replace at these two call sites:

• code-dot-org/shared/middleware/files_api.rb

  Line 351 in 335c217

  response = buckets.create_or_replace(encrypted_channel_id, filename, body, version_to_replace)

• code-dot-org/shared/middleware/files_api.rb

  Line 650 in 335c217

  response = bucket.create_or_replace(

this seems fine to do in a later PR. the applab asset / gamelab animation case may be somewhat unlikely to ever occur, but since these apps are constantly regenerating their thumbnails, it seems worth tracking and addressing the files_put_file call site soon.