Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-49246

Users without grade publishing capabilities can access key manager page (without any use)

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide
      1. As admin, enable grade publishing (gradepublishing).
      1. In a different browser, log in as teacher.
      2. Select a course and go to Course Administration > Grades.
      3. Make sure there's no Key Manager option on the drop down at the top.
      4. Expand the Export on menu.
      5. Make sure there's no Key Manager link.
      6. Expand the Import on menu.
      7. Make sure there's no Key Manager link.
      8. Try to access the key manager files through URL:
        • grade/export/keymanager.php?id=COURSEID
        • grade/export/key.php?courseid=COURSEID
        • grade/import/keymanager.php?id=COURSEID
        • grade/import/key.php?courseid=COURSEID
      9. Make sure that you get a permission error in all these cases.
      10. As admin, and give the capability gradeexport/ods:publish to teacher role.
      11. Repeat the steps above as teacher, and make sure you're able to see the Key manager on the menu, on the drop down and you're able to access those pages without any problem.
      12. Now, log in as manager, repeat the steps above and make sure you're able to see the Key manager on the menu, on the drop down and you're able to access those pages without any problem.
      Show
      As admin, enable grade publishing (gradepublishing). In a different browser, log in as teacher . Select a course and go to Course Administration > Grades. Make sure there's no Key Manager option on the drop down at the top. Expand the Export on menu. Make sure there's no Key Manager link. Expand the Import on menu. Make sure there's no Key Manager link. Try to access the key manager files through URL: grade/export/keymanager.php?id=COURSEID grade/export/key.php?courseid=COURSEID grade/import/keymanager.php?id=COURSEID grade/import/key.php?courseid=COURSEID Make sure that you get a permission error in all these cases. As admin , and give the capability gradeexport/ods:publish to teacher role. Repeat the steps above as teacher , and make sure you're able to see the Key manager on the menu, on the drop down and you're able to access those pages without any problem. Now, log in as manager, repeat the steps above and make sure you're able to see the Key manager on the menu, on the drop down and you're able to access those pages without any problem.
    • Affected Branches:
      MOODLE_28_STABLE
    • Fixed Branches:
      MOODLE_29_STABLE
    • Pull from Repository:
    • Pull Master Branch:
      MDL-49246-master

      Description

      Steps to reproduce:

      1. Log in as a user with default role of teacher i.e. role without any grade publishing capabilities
      2. Go to course gradebook and look in the administration block under Grade administration > Export (or in the gradebook dropdown menu under Export)

      Expected result: Teacher cannot see Key manager link.

      Actual result: Key manager link displayed and teacher gets confused.

        Attachments

          Activity

            People

            Assignee:
            lameze Simey Lameze
            Reporter:
            tsala Helen Foster
            Peer reviewer:
            David Monllaó David Monllaó
            Integrator:
            Dan Poltawski Dan Poltawski
            Tester:
            Adrian Greeve Adrian Greeve
            Participants:
            Component watchers:
            Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias, Sujith Haridasan, Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Sara Arjona (@sarjona)
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Fix Release Date:
              11/May/15