Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-45874

Issue with navigation/access to individual user activity reports, particularly by non-editing teachers in separate groups.

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide
      1. Create a course with at least two groups and set it to separate
      2. Enrol a student and a non editing teacher user
      3. Prevent moodle/site:accessallgroups for the non editing teacher user
      4. Add both the student and the non editing teacher to the same group
      5. Log in as the non editing teacher user
      6. Open the profile of the student user
      7. Check the admin block, the activity report link is there
      Show
      Create a course with at least two groups and set it to separate Enrol a student and a non editing teacher user Prevent moodle/site:accessallgroups for the non editing teacher user Add both the student and the non editing teacher to the same group Log in as the non editing teacher user Open the profile of the student user Check the admin block, the activity report link is there
    • Affected Branches:
      MOODLE_23_STABLE, MOODLE_26_STABLE, MOODLE_27_STABLE, MOODLE_28_STABLE
    • Fixed Branches:
      MOODLE_26_STABLE, MOODLE_27_STABLE
    • Pull from Repository:
    • Pull Master Branch:

      Description

      Two Moodle versions are involved in this scenario:
      Old version: 2.3.11
      New version: 2.6.2

      Before the upgrade, admins could access an individual user's course activity reports from the navigation block under "Courses > [course] > Participants > [user] > Activity Reports". Non-editing teachers could also access a user's activity reports on a course if they were in the same group on the course.
      Since the upgrade, admins can access the same reports from the administration block under "Profile settings for [user] > Activity Reports" but the permission needed to navigate this way is "moodle/site:accessallgroups" which wasn't required to navigate to the reports in 2.3.11. For non-editing teachers who should only access their own group, providing them with access all groups permission is not an option. Our concern is to be able to provide non-editing teachers with access to a student user's individual activity reports (Today's logs, Complete report, etc) for the users in the same group as themselves.

      Also note that if, as site administrator, one provides the non-editing teacher with a direct link to a user's reports, the non- editing teacher can then view them without this added permission (accessallgroups), so it looks to be a problem with navigation.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              danielneis Daniel Neis Araujo
              Reporter:
              annephelan Anne Phelan
              Peer reviewer:
              Marina Glancy
              Integrator:
              Eloy Lafuente (stronk7)
              Tester:
              Rajesh Taneja
              Participants:
              Component watchers:
              Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias, Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias
              Votes:
              6 Vote for this issue
              Watchers:
              10 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                8/Sep/14