Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-57251

Boost: Access denied error when clicking on Site administration when logged in as a user with a course creator role

    Details

    • Testing Instructions:
      Hide
      • Before upgrading add a user as a course creator (on the site level).
        • Site administration > Users > Permissions > Assign system roles.
      • Also create a new role that uses 'coursecreator' as the archetype. Assign a user to this new role.
        • Site administration > Users > Permissions > Define roles.
      1. Upgrade to the latest version.
      2. Log in as the course creator.
      3. Open the side navigation section and observe that the site administration link is visible. Click the link should show settings for the course creator and not an error.
      4. Log in as the administrator and set the capability moodle/site:configview to prohibit for the course creator role.
      5. Log in as the course creator.
      6. Observe that the site administration link from before is no longer visible.
      7. Do the previous again with the new role that you created.
      1. Create a new installation.
      2. Add a user as a course creator (on the site level).
      3. Log in as the course creator.
      4. Check that clicking site administration shows the "Manage courses and categories" link in the main section.
      Show
      Before upgrading add a user as a course creator (on the site level). Site administration > Users > Permissions > Assign system roles. Also create a new role that uses 'coursecreator' as the archetype. Assign a user to this new role. Site administration > Users > Permissions > Define roles. Upgrade to the latest version. Log in as the course creator. Open the side navigation section and observe that the site administration link is visible. Click the link should show settings for the course creator and not an error. Log in as the administrator and set the capability moodle/site:configview to prohibit for the course creator role. Log in as the course creator. Observe that the site administration link from before is no longer visible. Do the previous again with the new role that you created. Create a new installation. Add a user as a course creator (on the site level). Log in as the course creator. Check that clicking site administration shows the "Manage courses and categories" link in the main section.
    • Affected Branches:
      MOODLE_32_STABLE
    • Fixed Branches:
      MOODLE_32_STABLE
    • Pull from Repository:
    • Pull 3.2 Branch:
      wip-MDL-57251-32
    • Pull Master Branch:
      wip-MDL-57251-master
    • Sprint:
      3.3 sprint 1

      Description

      1. Log in as a user with a course creator role.
      2. Click "Site administration" on the flat navigation panel.
      3. Expected
        • There should be no error message shown and the appropriate page should be opened.
      4. Actual
        • An access denied error page comes up.

      Not sure if related, but on Clean theme, when I expand the Site administration node, and I click on the Courses node, I get the following notice:

      Notice: Undefined variable: buttons in /home/jun/moodles/stable_master/moodle/admin/category.php on line 130

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Votes:
                  0 Vote for this issue
                  Watchers:
                  5 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:
                    Fix Release Date:
                    9/Jan/17