Moodle

Users with admin role assigned at the system level show up on participants drop down list for recent activity in courses they are not enrolled in.

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: 1.9.2
  • Fix Version/s: 2.0
  • Labels:
    None
  • Affected Branches:
    MOODLE_19_STABLE
  • Fixed Branches:
    MOODLE_20_STABLE

Description

Users with admin role assigned at the system level show up on the participants drop down list for recent activity in courses they are not enrolled in.

To reproduce:
1. Go into a course that does not have system level administrators enrolled.
2. If the course doesn't have the recent activity block add it.
3. Click "Full report of recent activity ..." link in recent activity block
4. Click on participants drop down list. You will see site admin users that aren't in enrolled in the list..

Issue Links

Activity

Hide
Caroline Moore added a comment -

Users with roles assigned above the course level (e.g. at the Category or System level) who can view all courses within that scope show up in a variety of inappropriate places, including the Groups/Groupings potential members list and the Recent Activity user list.

Show
Caroline Moore added a comment - Users with roles assigned above the course level (e.g. at the Category or System level) who can view all courses within that scope show up in a variety of inappropriate places, including the Groups/Groupings potential members list and the Recent Activity user list.
Hide
Eloy Lafuente (stronk7) added a comment -

I think this can be fixed for admins (by preventing users with "doanything" capability to be shown in those places (recent activity, groups...).

But any user with "courseview" capability assigned at higher levels is, in fact, "enrolled" in the course at all effects, i.e he/she is a participant.

And this is behaviour in Moodle 1.9.x afaik, and it's actively being discussed for Moodle 2.0 in MDL-11798 MDL-17949 and http://docs.moodle.org/en/Development:Enrolment_plugins_2.0

I really think the "courseview" duality (view + participate) cannot/won't be easily fixed in 1.9 at all.

Show
Eloy Lafuente (stronk7) added a comment - I think this can be fixed for admins (by preventing users with "doanything" capability to be shown in those places (recent activity, groups...). But any user with "courseview" capability assigned at higher levels is, in fact, "enrolled" in the course at all effects, i.e he/she is a participant. And this is behaviour in Moodle 1.9.x afaik, and it's actively being discussed for Moodle 2.0 in MDL-11798 MDL-17949 and http://docs.moodle.org/en/Development:Enrolment_plugins_2.0 I really think the "courseview" duality (view + participate) cannot/won't be easily fixed in 1.9 at all.
Hide
Petr Škoda (skodak) added a comment -

Administrators do not have any role any more in 2.0dev, participation page is now using the real user_enrolments table
thanks for the report!

Show
Petr Škoda (skodak) added a comment - Administrators do not have any role any more in 2.0dev, participation page is now using the real user_enrolments table thanks for the report!

People

Dates

  • Created:
    Updated:
    Resolved: