Moodle

Security Report erroneous Critical warning on Windows System for default role

Details

  • Type: Sub-task Sub-task
  • Status: Closed Closed
  • Priority: Major Major
  • Resolution: Cannot Reproduce
  • Affects Version/s: 1.9.3
  • Fix Version/s: None
  • Component/s: Administration
  • Labels:
    None
  • Database:
    MySQL
  • Affected Branches:
    MOODLE_19_STABLE

Description

On Windows 2003 Operating System, Security Report shows Critical message for "Registered user role" and for "Site default course role":

Security report claims 'Incorrectly defined default user role "Authenticated user" detected!' - but on User Policies the Default role for all users is Authenticated users and the Authenticated user has default capabilities.

Security report claims 'Incorrectly defined default course role "Student" detected! - but on User Policies the Default role for user in a course is Student and the Student role has default capabilities.

Issue Links

This issue has a non-specific relationship to:
MDL-17611 mod/feedback:complete marked with XSS risk Blocker Closed

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Andrea Bicciolo added a comment -

Environment is Apache-PHP-MySQL . Only the OS is Windows Server 2003.

Show
Andrea Bicciolo added a comment - Environment is Apache-PHP-MySQL . Only the OS is Windows Server 2003.
Hide
Permalink
Andrea Bicciolo added a comment -

The message about "Student" appears very strange, particularly because the "Default course roles" are shown as OK with teh message "Used only default course role". How it can be OK if the Site default course role is considered 'Critical' ?

Show
Andrea Bicciolo added a comment - The message about "Student" appears very strange, particularly because the "Default course roles" are shown as OK with teh message "Used only default course role". How it can be OK if the Site default course role is considered 'Critical' ?
Hide
Permalink
Martin Dougiamas added a comment -

Can you fix this urgently, Petr?

Show
Martin Dougiamas added a comment - Can you fix this urgently, Petr?
Hide
Permalink
Petr Škoda (skodak) added a comment -

caused by a bug in feedback module, I suppose you have it installed, right?

Show
Petr Škoda (skodak) added a comment - caused by a bug in feedback module, I suppose you have it installed, right?
Hide
Permalink
Petr Škoda (skodak) added a comment -

Closing for now - there should not be anything wrong in the report,
please reopen if the changes in Feedback contrib did not fix this.

Thanks very much for the testing of this report!!

Show
Petr Škoda (skodak) added a comment - Closing for now - there should not be anything wrong in the report, please reopen if the changes in Feedback contrib did not fix this. Thanks very much for the testing of this report!!

People

Vote (0)
Watch (1)

Dates

  • Created:
    Updated:
    Resolved:
Atlassian JIRA (v4.4.3#663-r165197) | Report a problem
Powered by a free Atlassian JIRA open source license for Moodle. Try JIRA - bug tracking software for your team.