[MDL-36272] Knowing forum discussion ID allows users to view expired discussions. - Moodle Tracker

XML

Word

Printable

Affected Branches:
MOODLE_22_STABLE, MOODLE_23_STABLE
Pull from Repository:
https://github.com/markn86/moodle.git
Pull Master Branch:
~~MDL-36272~~_master
Pull Master Diff URL:
https://github.com/markn86/moodle/compare/MDL-36272_master
Testing Instructions:
Hide

Visit <yoursite>/admin/settings.php?section=modsettingforum and and check 'Timed posts'.

Create a forum post in a course and set it to expire yesterday.

Create another forum post that is not starting until tomorrow.

Create another forum post that sets no dates.

Copy the URLs of each of these.

Log in as student and visit the URLs.

A message should display saying it is not available for the first two, and the third should be available.
Show
Visit <yoursite>/admin/settings.php?section=modsettingforum and and check 'Timed posts'. Create a forum post in a course and set it to expire yesterday. Create another forum post that is not starting until tomorrow. Create another forum post that sets no dates. Copy the URLs of each of these. Log in as student and visit the URLs. A message should display saying it is not available for the first two, and the third should be available.

If a discussion has expired a student can still view it if they know the direct link

Testing discovered

MDL-30377 RSS feed picks up expired (hidden) forum posts

will be (partly) resolved by

MDL-30377 RSS feed picks up expired (hidden) forum posts

Component watchers:: Adrian Greeve, Ilya Tregubov, Kevin Percy, Mathew May, Mihail Geshoski, Shamim Rezaie