Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-27314

Not possible to delete or regrade selected quiz attempts in separate groups mode

    Details

    • Testing Instructions:
      Hide

      1. Create a course with two groups, with a teacher and student in each.
      2. Edit/override the teacher role, so it does not have 'access all groups'.
      3. Create a quiz set to separate groups mode, and add some questions.
      4. Attempt it as some students from each group.
      5. As teacher, verify that you can delete quiz attempts from your group (using the overview and/or responses report).
      6. Try to hack the system using firebug: Find the checkbox like <input type="checkbox" value="238" name="attemptid[]"> and edit the attempt id to point to the attempt of a student not in your group, then click the delete button. The attempt should not be deleted. (It is just silently skipped, there is no error message.)

      Note that the code is different in 2.0, so the fix is different there. This really needs to be tested separately in 2.0 and more recent branches.

      Show
      1. Create a course with two groups, with a teacher and student in each. 2. Edit/override the teacher role, so it does not have 'access all groups'. 3. Create a quiz set to separate groups mode, and add some questions. 4. Attempt it as some students from each group. 5. As teacher, verify that you can delete quiz attempts from your group (using the overview and/or responses report). 6. Try to hack the system using firebug: Find the checkbox like <input type="checkbox" value="238" name="attemptid[]"> and edit the attempt id to point to the attempt of a student not in your group, then click the delete button. The attempt should not be deleted. (It is just silently skipped, there is no error message.) Note that the code is different in 2.0, so the fix is different there. This really needs to be tested separately in 2.0 and more recent branches.
    • Affected Branches:
      MOODLE_20_STABLE, MOODLE_21_STABLE, MOODLE_22_STABLE, MOODLE_23_STABLE
    • Fixed Branches:
      MOODLE_20_STABLE, MOODLE_21_STABLE, MOODLE_22_STABLE
    • Pull from Repository:
    • Pull Master Branch:

      Description

      I have a class of 20 students, all of whom who took a quiz once.

      One of these students attempts needs to be deleted. So in the Results window I select that attempt, and then click on the [Delete selected attempts] button. The page reloads, but the attempt is still there. I've turned on Debug message to developer, but get no error messages.

      I've indicated the priority of this issues as a 'Blocker'. I suppose it's not the end of the world, but as a feature that worked fine in 1.9, it seems to me to be something that should work in the newer and better version 2.

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Votes:
                  6 Vote for this issue
                  Watchers:
                  7 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:
                    Fix Release Date:
                    9/Jan/12