-
Improvement
-
Resolution: Done
-
Major
-
1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.7, 1.8.8, 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4
-
MOODLE_16_STABLE, MOODLE_17_STABLE, MOODLE_18_STABLE, MOODLE_19_STABLE
When a course is deleted all the records in the table mdl_log related to that course are deleted.
That means you have no way to know who deleted the course (there may be several course teachers), when and by whom the course was created, and even whether the course once existed.
I think it could be a security issue because an administrator should be able to trace course creation a deletion.
You can see how the function "remove_course_contents" (lib/moodlelib.php http://cvs.moodle.org/moodle/lib/moodlelib.php?revision=1.1168&view=markup ) deletes all the records from mdl_log calling function "delete_records", and how the function "delete_course" doesn't insert any record in mdl_log after deleting the course.