Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-43848

Messaging Privacy-Contents should not be displayed in Notice

    XMLWordPrintable

Details

    • MOODLE_26_STABLE
    • MOODLE_24_STABLE, MOODLE_25_STABLE, MOODLE_26_STABLE, MOODLE_27_STABLE
    • Hide
      1. Create two users, teacher and student
      2. As teacher, go to your messaging preferences (Home / ▶ My profile settings / ▶ Messaging), ensure popup notifcation is enabled for Assignment notifications and Personal messages between users
      3. Login as user student and send a message to teacher
      4. Login as teacher
      5. VERIFY: that the message popup displays and you can see that a message has been sent from a student, but not the content.
      6. Read the message
      7. Now create a new assignment in a course ensure that 'Notify graders about submissions' is enabled
      8. Login as student
      9. Submit the assignment created by teacher
      10. Login as teacher
      11. VERIFY: that the message popup displays and tells you have a new notificaiton
      Show
      Create two users, teacher and student As teacher, go to your messaging preferences (Home / ▶ My profile settings / ▶ Messaging), ensure popup notifcation is enabled for Assignment notifications and Personal messages between users Login as user student and send a message to teacher Login as teacher VERIFY: that the message popup displays and you can see that a message has been sent from a student, but not the content. Read the message Now create a new assignment in a course ensure that 'Notify graders about submissions' is enabled Login as student Submit the assignment created by teacher Login as teacher VERIFY: that the message popup displays and tells you have a new notificaiton

    Description

      This hasn't caused a privacy concern yet but when I log-in during class to present some Moodle class material, sometimes a moodle message appears from student X. Not only do I see that he sent a message but the contents of the message is displayed to the whole class. Does the class need to see the contents of private messages? I think not. While I encourage students to only message things they wouldn't mind everyone seeing, it makes sense to protect their privacy.
      Pop-up moodle message notices, therefore, should not, in my opinion, include the message contents. Either there should be profile setting for how pop-up messages are displayed or only the subject line or sender name should be displayed by default. I could not find this issue reported on moodle tracker.

      Attachments

        1. MDL-43848-25_24.patch
          3 kB
        2. MDL-43848-27_26.patch
          3 kB
        3. MDL-43848-master.patch
          4 kB
        4. new message.png
          new message.png
          10 kB
        5. new messages.png
          new messages.png
          4 kB

        Issue Links

          Activity

            People

              poltawski Dan Poltawski
              dbroad Douglas Broad
              Frédéric Massart Frédéric Massart
              Marina Glancy Marina Glancy
              Mark Nelson Mark Nelson
              Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Laurent David, Sara Arjona (@sarjona)
              Votes:
              2 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                14/Jul/14