Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-57251

Boost: Access denied error when clicking on Site administration when logged in as a user with a course creator role

          Details

          • Testing Instructions:
            Hide
            • Before upgrading add a user as a course creator (on the site level).
              • Site administration > Users > Permissions > Assign system roles.
            • Also create a new role that uses 'coursecreator' as the archetype. Assign a user to this new role.
              • Site administration > Users > Permissions > Define roles.
            1. Upgrade to the latest version.
            2. Log in as the course creator.
            3. Open the side navigation section and observe that the site administration link is visible. Click the link should show settings for the course creator and not an error.
            4. Log in as the administrator and set the capability moodle/site:configview to prohibit for the course creator role.
            5. Log in as the course creator.
            6. Observe that the site administration link from before is no longer visible.
            7. Do the previous again with the new role that you created.
            1. Create a new installation.
            2. Add a user as a course creator (on the site level).
            3. Log in as the course creator.
            4. Check that clicking site administration shows the "Manage courses and categories" link in the main section.
            Show
            Before upgrading add a user as a course creator (on the site level). Site administration > Users > Permissions > Assign system roles. Also create a new role that uses 'coursecreator' as the archetype. Assign a user to this new role. Site administration > Users > Permissions > Define roles. Upgrade to the latest version. Log in as the course creator. Open the side navigation section and observe that the site administration link is visible. Click the link should show settings for the course creator and not an error. Log in as the administrator and set the capability moodle/site:configview to prohibit for the course creator role. Log in as the course creator. Observe that the site administration link from before is no longer visible. Do the previous again with the new role that you created. Create a new installation. Add a user as a course creator (on the site level). Log in as the course creator. Check that clicking site administration shows the "Manage courses and categories" link in the main section.
          • Affected Branches:
            MOODLE_32_STABLE
          • Fixed Branches:
            MOODLE_32_STABLE
          • Pull from Repository:
          • Pull 3.2 Branch:
            wip-MDL-57251-32
          • Pull 3.2 Diff URL:
          • Pull Master Branch:
            wip-MDL-57251-master
          • Pull Master Diff URL:
          • Sprint:
            3.3 sprint 1

            Description

            1. Log in as a user with a course creator role.
            2. Click "Site administration" on the flat navigation panel.
            3. Expected
              • There should be no error message shown and the appropriate page should be opened.
            4. Actual
              • An access denied error page comes up.

            Not sure if related, but on Clean theme, when I expand the Site administration node, and I click on the Courses node, I get the following notice:

            Notice: Undefined variable: buttons in /home/jun/moodles/stable_master/moodle/admin/category.php on line 130

              Gliffy Diagrams

                Attachments

                  Issue Links

                  Discovered while testing

                  Bug - A problem which impairs or prevents Moodle from functioning correctly. MDL-57213 Boost - My courses are not displayed with $CFG->navshowmycoursecategories on

                  • Critical - Crashes server, loss of data, severe memory leak
                  • Closed
                  is duplicated by

                  Bug - A problem which impairs or prevents Moodle from functioning correctly. MDL-57483 Boost: No access to Manage Courses and Categories for Course Creator (system)

                  • Major - Major loss of function, incorrect output
                  • Closed

                    Activity

                      People

                      • Votes:
                        0 Vote for this issue
                        Watchers:
                        5 Start watching this issue

                        Dates

                        • Created:
                          Updated:
                          Resolved:
                          Fix Release Date:
                          9/Jan/17