Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-54891

Admin should be able to set defaults and lock settings for Activity results block

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.1
    • Fix Version/s: 3.2
    • Component/s: Blocks
    • Labels:
    • Testing Instructions:
      Hide

      Manual testing:

      1. Create an course with a gradeable activity (such as an offline assignment)
      2. Assign 2-3 students to the course
      3. Assign grades to the student assignment submissions.
      4. Go to Admin > Plugins > Blocks > Activity results
      5. Change the default for each setting each setting
      6. Add a new instance of the block
      7. VERIFY the defaults configured are applied to the new instance (verify each setting one by one)
      8. In Admin > Plugins > Blocks > Activity results
      9. Lock each setting individually
      10. VERIFY that the teacher is unable to edit them

      Automated testing:
      Run behat for @block_activity_results

      Show
      Manual testing: Create an course with a gradeable activity (such as an offline assignment) Assign 2-3 students to the course Assign grades to the student assignment submissions. Go to Admin > Plugins > Blocks > Activity results Change the default for each setting each setting Add a new instance of the block VERIFY the defaults configured are applied to the new instance (verify each setting one by one) In Admin > Plugins > Blocks > Activity results Lock each setting individually VERIFY that the teacher is unable to edit them Automated testing: Run behat for @block_activity_results
    • Difficulty:
      Easy
    • Affected Branches:
      MOODLE_31_STABLE
    • Fixed Branches:
      MOODLE_32_STABLE
    • Pull from Repository:
    • Pull Master Branch:
      MDL-54891-master
    • Pull Master Diff URL:

      Description

      Originally raised as a concern at https://moodle.org/mod/forum/discuss.php?d=334550

      The Activity Results block displays to viewers the grades of students who undertook an assignment. This has been viewed (by our Data Protection Team) as being not compatible with the data protection rules, so the feature should be disabled.

      The main problem is that it displays personally identifiable information (i.e. the name of the student) and the grade they achieved, not to the student but to anyone.

      Arguably this may be acceptable if the student has given consent for this, but there is no mechanism to gain this within the block, so would be up to the Institution to acquire this consent.

      It would be helpful if the module did flag up that there are potential data protection issues with this module (and I suspect there may be other modules that raise similar concerns).

        Attachments

          Activity

            People

            Assignee:
            sbourget Stephen Bourget
            Reporter:
            mhughes2k Michael Hughes
            Peer reviewer:
            Ryan Wyllie
            Integrator:
            Dan Poltawski
            Tester:
            cameron1729
            Participants:
            Component watchers:
            Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias, Sujith Haridasan
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Fix Release Date:
              5/Dec/16