Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-27314

Not possible to delete or regrade selected quiz attempts in separate groups mode

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide

      1. Create a course with two groups, with a teacher and student in each.
      2. Edit/override the teacher role, so it does not have 'access all groups'.
      3. Create a quiz set to separate groups mode, and add some questions.
      4. Attempt it as some students from each group.
      5. As teacher, verify that you can delete quiz attempts from your group (using the overview and/or responses report).
      6. Try to hack the system using firebug: Find the checkbox like <input type="checkbox" value="238" name="attemptid[]"> and edit the attempt id to point to the attempt of a student not in your group, then click the delete button. The attempt should not be deleted. (It is just silently skipped, there is no error message.)

      Note that the code is different in 2.0, so the fix is different there. This really needs to be tested separately in 2.0 and more recent branches.

      Show
      1. Create a course with two groups, with a teacher and student in each. 2. Edit/override the teacher role, so it does not have 'access all groups'. 3. Create a quiz set to separate groups mode, and add some questions. 4. Attempt it as some students from each group. 5. As teacher, verify that you can delete quiz attempts from your group (using the overview and/or responses report). 6. Try to hack the system using firebug: Find the checkbox like <input type="checkbox" value="238" name="attemptid[]"> and edit the attempt id to point to the attempt of a student not in your group, then click the delete button. The attempt should not be deleted. (It is just silently skipped, there is no error message.) Note that the code is different in 2.0, so the fix is different there. This really needs to be tested separately in 2.0 and more recent branches.
    • Affected Branches:
      MOODLE_20_STABLE, MOODLE_21_STABLE, MOODLE_22_STABLE, MOODLE_23_STABLE
    • Fixed Branches:
      MOODLE_20_STABLE, MOODLE_21_STABLE, MOODLE_22_STABLE
    • Pull from Repository:
    • Pull Master Branch:

      Description

      I have a class of 20 students, all of whom who took a quiz once.

      One of these students attempts needs to be deleted. So in the Results window I select that attempt, and then click on the [Delete selected attempts] button. The page reloads, but the attempt is still there. I've turned on Debug message to developer, but get no error messages.

      I've indicated the priority of this issues as a 'Blocker'. I suppose it's not the end of the world, but as a feature that worked fine in 1.9, it seems to me to be something that should work in the newer and better version 2.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              timhunt Tim Hunt
              Reporter:
              stuart Peter Ruthven-Stuart
              Integrator:
              Eloy Lafuente (stronk7)
              Tester:
              Eloy Lafuente (stronk7)
              Participants:
              Component watchers:
              Tim Hunt, Andrew Nicols, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze
              Votes:
              6 Vote for this issue
              Watchers:
              7 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                9/Jan/12