Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-57251

Boost: Access denied error when clicking on Site administration when logged in as a user with a course creator role

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide
      • Before upgrading add a user as a course creator (on the site level).
        • Site administration > Users > Permissions > Assign system roles.
      • Also create a new role that uses 'coursecreator' as the archetype. Assign a user to this new role.
        • Site administration > Users > Permissions > Define roles.
      1. Upgrade to the latest version.
      2. Log in as the course creator.
      3. Open the side navigation section and observe that the site administration link is visible. Click the link should show settings for the course creator and not an error.
      4. Log in as the administrator and set the capability moodle/site:configview to prohibit for the course creator role.
      5. Log in as the course creator.
      6. Observe that the site administration link from before is no longer visible.
      7. Do the previous again with the new role that you created.
      1. Create a new installation.
      2. Add a user as a course creator (on the site level).
      3. Log in as the course creator.
      4. Check that clicking site administration shows the "Manage courses and categories" link in the main section.
      Show
      Before upgrading add a user as a course creator (on the site level). Site administration > Users > Permissions > Assign system roles. Also create a new role that uses 'coursecreator' as the archetype. Assign a user to this new role. Site administration > Users > Permissions > Define roles. Upgrade to the latest version. Log in as the course creator. Open the side navigation section and observe that the site administration link is visible. Click the link should show settings for the course creator and not an error. Log in as the administrator and set the capability moodle/site:configview to prohibit for the course creator role. Log in as the course creator. Observe that the site administration link from before is no longer visible. Do the previous again with the new role that you created. Create a new installation. Add a user as a course creator (on the site level). Log in as the course creator. Check that clicking site administration shows the "Manage courses and categories" link in the main section.
    • Affected Branches:
      MOODLE_32_STABLE
    • Fixed Branches:
      MOODLE_32_STABLE
    • Pull from Repository:
    • Pull Master Branch:
      wip-MDL-57251-master
    • Sprint:
      3.3 sprint 1

      Description

      1. Log in as a user with a course creator role.
      2. Click "Site administration" on the flat navigation panel.
      3. Expected
        • There should be no error message shown and the appropriate page should be opened.
      4. Actual
        • An access denied error page comes up.

      Not sure if related, but on Clean theme, when I expand the Site administration node, and I click on the Courses node, I get the following notice:

      Notice: Undefined variable: buttons in /home/jun/moodles/stable_master/moodle/admin/category.php on line 130

        Attachments

        1. screenshot-1.png
          71 kB
          Jun Pataleta
        2. screenshot-2.png
          121 kB
          Jun Pataleta

          Issue Links

            Activity

              People

              Assignee:
              abgreeve Adrian Greeve
              Reporter:
              jpataleta Jun Pataleta
              Peer reviewer:
              Jake Dallimore
              Integrator:
              Dan Poltawski
              Tester:
              Ryan Wyllie
              Participants:
              Component watchers:
              Andrew Nicols, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                9/Jan/17