Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-15979

Allow admin to use EMBED and OBJECT but not others

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Minor
    • Resolution: Duplicate
    • Affects Version/s: 1.9.2
    • Fix Version/s: None
    • Component/s: Roles / Access
    • Labels:
      None
    • Affected Branches:
      MOODLE_19_STABLE

      Description

      May I recommend a new permissions: useembedandobject.

      If set to yes, then selected roles could use the EMBED and OBJECT tags.

      This is important because Apple's preferred way of embedding QuickTime is to use both of these tags, but I agree that for security reasons students should not be able to use them. Currently, at least in the Database module, EMBED and OBJECT tags are stripped out even if site permissions are set to allow EMBED and OBJECT tags.

      Thank you.

      Bill

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              skodak Petr Skoda
              Reporter:
              billmounce Bill Mounce
              Tester:
              Nobody
              Participants:
              Component watchers:
              Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Sara Arjona (@sarjona)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: