Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-50729

Oddity in logs; shows student updated others' grades.

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide

      1/ Need a course with atleast one assignment with few graded submissions.
      2/ Go to grade_items table and set "needsupdate" to 1 for the course and the assignment.
      3/ Go to grade_grades table and change the rawgrade and finalgrade to be more than rawgrademax for the assignment for a user.
      4/ Login as any student to this course and view any of your grade report.
      5/ Check logs as admin.
      6/ You would have something like "The user with id '-1' updated the grade with id '41' for the user with id '22' for the grade item with id '9'." in your logs.

      (Note the acting user id must be -1 and will have no name in the report)

      Show
      1/ Need a course with atleast one assignment with few graded submissions. 2/ Go to grade_items table and set "needsupdate" to 1 for the course and the assignment. 3/ Go to grade_grades table and change the rawgrade and finalgrade to be more than rawgrademax for the assignment for a user. 4/ Login as any student to this course and view any of your grade report. 5/ Check logs as admin. 6/ You would have something like "The user with id '-1' updated the grade with id '41' for the user with id '22' for the grade item with id '9'." in your logs. (Note the acting user id must be -1 and will have no name in the report)
    • Affected Branches:
      MOODLE_28_STABLE, MOODLE_30_STABLE, MOODLE_31_STABLE, MOODLE_32_STABLE
    • Fixed Branches:
      MOODLE_31_STABLE, MOODLE_32_STABLE
    • Pull Master Branch:
      MDL-50729-master
    • Sprint:
      3.3 sprint 3

      Description

      The logs indicate that a user with the role "Student" had updated the grades from other users, but i don't believe it for the following reasons:

      Users haven't the permissions:
      The users have the role student and a detailed check showed, that they have no rights to change something.
      Users don't see settings /gradebook etc.
      I logged in as the concerned users and there were no possibilites or links to get in the grade book.

      I suspect an issue in the Logs. We know that the grades didn't actually change. So what could have triggered the log to show this? We are using the "standard log". The event looks like this:

      The user with id 'xxx4' updated the grade with id 'xxxxx4' for the user with id 'xxx4' for the grade item with id 'xxxx8'.

      Also of note - these grade items were manually created.

      Thank you for your help and consideration.
      -David

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                18 Vote for this issue
                Watchers:
                23 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Fix Release Date:
                  13/Mar/17