-
Improvement
-
Resolution: Fixed
-
Minor
-
2.3.3, 2.4
-
MOODLE_23_STABLE, MOODLE_24_STABLE
-
MOODLE_25_STABLE
-
MDL-37164_message_self -
In the messaging, any user can search for the guest account, or even their account. From there they can:
- Add to contact list
- Block contact
- Send messages
I think we should prevent the users from finding and interacting with themselves and they guest account. This means that hacking the user specifying their own ID or the guest account's one should not work.
- Go to messaging
- Search for 'guest'
- Search for <yourname>
Actual
- You find the guest account and yourself and can interact.
Expected
- You don't find yourself or the guest account