Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-45640

User can block messages from self

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Cannot Reproduce
    • Affects Version/s: 2.4.10, 2.7
    • Fix Version/s: None
    • Component/s: Messages
    • Labels:
    • Testing Instructions:
      Hide
      • Click in My profile > Messages.
      • Search and add a user to you contact list.
      • Click on Block contact link, or in the block icon.
      • Change blockcontact URL parameter to your own user ID.
      • Make sure you receive a error message like this and your user is not blocked.

        You can't block yourself.
        

      Show
      Click in My profile > Messages. Search and add a user to you contact list. Click on Block contact link, or in the block icon. Change blockcontact URL parameter to your own user ID. Make sure you receive a error message like this and your user is not blocked. You can't block yourself.
    • Difficulty:
      Easy
    • Affected Branches:
      MOODLE_24_STABLE, MOODLE_27_STABLE
    • Pull from Repository:
    • Pull Master Branch:
      MDL-45640-master

      Description

      It is possible to send messages to yourself by manually setting the "id" or "user2" parameters to your own user ID on the "/messages/index.php" page.

      From here it is also possible to add yourself as a contact, or to block communication from yourself.

      Steps to reproduce:

      • Login to Moodle
      • Find your own user ID from the profile link in the top right
      • Manually browse to "/message/index.php?user2=<<YOURID>>
      • Click the "Block Contact" link

      Expected outcome:

      • Links should not be visible, or should give error when attempting to block/add self

      Actual outcome:

      • It is possible to add self as contact or block communication from self.

      Only tested on 2.4.10 and 2.7, but likely to affect intermediate versions as well.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              rbdionach Robin Bailey
              Peer reviewer:
              Ankit Agarwal
              Participants:
              Component watchers:
              Jake Dallimore, Jun Pataleta
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: