Moodle

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.7.1, 1.7.2
• Fix Version/s: 1.8.4
• Component/s: Messages
• Labels:

  None
• Environment:

  Moodle 1.7.1
  Linux debian
  Apache
  Postgresql 8.2

• EditingTeacher selects the course participants;
• Select the participants;
• Choose 'add/send message';
• A warning is showed saying that the user has not permission to send messages;

I verified the permissions for the role 'EditingTeacher'. All it's fine. The permission 'moodle/course:bulkmessaging' is allowed.

Looking the file /moodle/user/messageselect.php I find the follow verification:
require_capability('moodle/site:readallmessages', get_context_instance(CONTEXT_COURSE, $id));

This is a security verification or a Bug ?? For me, the EditingTeacher not needs view all sites's messages to send a message for your students.

I change that verification for this:
require_capability('moodle/course:bulkmessaging', get_context_instance(CONTEXT_COURSE, $id));

1. 

   messageselect.php

   23/Aug/07 11:55 PM

   5 kB

   Marcos V. B. Souza

• Assignee:

  Martin Dougiamas

  Reporter:

  Marcos V. B. Souza

  Tester:

  Helen Foster

  Participants:

  Marcos V. B. Souza, Martin Dougiamas

• Created:

  23/Aug/07 11:55 PM

  Updated:

  03/Jun/08 8:24 PM

  Resolved:

  03/Jun/08 8:24 PM