Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-57251

Boost: Access denied error when clicking on Site administration when logged in as a user with a course creator role

    XMLWordPrintable

Details

    • MOODLE_32_STABLE
    • MOODLE_32_STABLE
    • wip-MDL-57251-master
    • Hide
      • Before upgrading add a user as a course creator (on the site level).
        • Site administration > Users > Permissions > Assign system roles.
      • Also create a new role that uses 'coursecreator' as the archetype. Assign a user to this new role.
        • Site administration > Users > Permissions > Define roles.
      1. Upgrade to the latest version.
      2. Log in as the course creator.
      3. Open the side navigation section and observe that the site administration link is visible. Click the link should show settings for the course creator and not an error.
      4. Log in as the administrator and set the capability moodle/site:configview to prohibit for the course creator role.
      5. Log in as the course creator.
      6. Observe that the site administration link from before is no longer visible.
      7. Do the previous again with the new role that you created.
      1. Create a new installation.
      2. Add a user as a course creator (on the site level).
      3. Log in as the course creator.
      4. Check that clicking site administration shows the "Manage courses and categories" link in the main section.
      Show
      Before upgrading add a user as a course creator (on the site level). Site administration > Users > Permissions > Assign system roles. Also create a new role that uses 'coursecreator' as the archetype. Assign a user to this new role. Site administration > Users > Permissions > Define roles. Upgrade to the latest version. Log in as the course creator. Open the side navigation section and observe that the site administration link is visible. Click the link should show settings for the course creator and not an error. Log in as the administrator and set the capability moodle/site:configview to prohibit for the course creator role. Log in as the course creator. Observe that the site administration link from before is no longer visible. Do the previous again with the new role that you created. Create a new installation. Add a user as a course creator (on the site level). Log in as the course creator. Check that clicking site administration shows the "Manage courses and categories" link in the main section.
    • 3.3 sprint 1

    Description

      1. Log in as a user with a course creator role.
      2. Click "Site administration" on the flat navigation panel.
      3. Expected
        • There should be no error message shown and the appropriate page should be opened.
      4. Actual
        • An access denied error page comes up.

      Not sure if related, but on Clean theme, when I expand the Site administration node, and I click on the Courses node, I get the following notice:

      Notice: Undefined variable: buttons in /home/jun/moodles/stable_master/moodle/admin/category.php on line 130

      Attachments

        Issue Links

          Activity

            People

              abgreeve Adrian Greeve
              jpataleta Jun Pataleta
              Jake Dallimore Jake Dallimore
              Dan Poltawski Dan Poltawski
              Ryan Wyllie Ryan Wyllie
              Andrew Lyons, Huong Nguyen, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                9/Jan/17