[#MDL-18033] Security Report erroneous Critical warning on Windows System for default role

Issue Details (XML | Word | Printable)

Key:	MDL-18033
Type:	Sub-task
Status:	Resolved
Resolution:	Cannot Reproduce
Priority:	Major
Assignee:	Petr Škoda (skodak)
Reporter:	Andrea Bicciolo
Votes:	0
Watchers:	1

Operations

Add/Edit UI Mockup to this issue

If you were logged in you would be able to see more operations.

Moodle

MDL-18039

Security Report erroneous Critical warning on Windows System for default role

Created: 27/Jan/09 01:34 AM Updated: 27/Jan/09 06:27 PM

Component/s:

Administration

Affects Version/s:

1.9.3

Fix Version/s:

None

Issue Links:

Relates

This issue has a non-specific relationship to:

~~MDL-17611~~ mod/feedback:complete marked with XSS risk

Database:	MySQL
Participants:	Andrea Bicciolo, Martin Dougiamas and Petr Škoda (skodak)
Security Level:	None
Resolved date:	27/Jan/09
Affected Branches:	MOODLE_19_STABLE

Description

« Hide

On Windows 2003 Operating System, Security Report shows Critical message for "Registered user role" and for "Site default course role":

Security report claims 'Incorrectly defined default user role "Authenticated user" detected!' - but on User Policies the Default role for all users is Authenticated users and the Authenticated user has default capabilities.

Security report claims 'Incorrectly defined default course role "Student" detected! - but on User Policies the Default role for user in a course is Student and the Student role has default capabilities.

All

Comments

Change History

Version Control

Sort Order:

[ Permalink | « Hide ]

Andrea Bicciolo added a comment - 27/Jan/09 01:35 AM

Environment is Apache-PHP-MySQL . Only the OS is Windows Server 2003.

[ Permalink | « Hide ]

Andrea Bicciolo added a comment - 27/Jan/09 01:44 AM

The message about "Student" appears very strange, particularly because the "Default course roles" are shown as OK with teh message "Used only default course role". How it can be OK if the Site default course role is considered 'Critical' ?

[ Permalink | « Hide ]

Martin Dougiamas added a comment - 27/Jan/09 04:58 PM

Can you fix this urgently, Petr?

[ Permalink | « Hide ]

Petr Škoda (skodak) added a comment - 27/Jan/09 06:13 PM

caused by a bug in feedback module, I suppose you have it installed, right?

[ Permalink | « Hide ]

Petr Škoda (skodak) added a comment - 27/Jan/09 06:27 PM

Closing for now - there should not be anything wrong in the report,
please reopen if the changes in Feedback contrib did not fix this.

Thanks very much for the testing of this report!!

All content on this web site is made available under the GNU General Public License, unless otherwise stated.