Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-18189

When a course is deleted too much records are deleted from mdl_log. There is no clue left the course existed

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Done
    • Major
    • DEV backlog
    • 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.8, 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6, 1.8.7, 1.8.8, 1.9, 1.9.1, 1.9.2, 1.9.3, 1.9.4

    Description

      When a course is deleted all the records in the table mdl_log related to that course are deleted.

      That means you have no way to know who deleted the course (there may be several course teachers), when and by whom the course was created, and even whether the course once existed.

      I think it could be a security issue because an administrator should be able to trace course creation a deletion.

      You can see how the function "remove_course_contents" (lib/moodlelib.php http://cvs.moodle.org/moodle/lib/moodlelib.php?revision=1.1168&view=markup ) deletes all the records from mdl_log calling function "delete_records", and how the function "delete_course" doesn't insert any record in mdl_log after deleting the course.

      Attachments

        Issue Links

          Activity

            People

              moodle.com Moodle HQ
              crmas Carlos Romero Mas
              Votes:
              6 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Clockify

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.