Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-60191

Visibility problems with identity fields like email or phone

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide

      TEST 1:
      Attending to the display configuration in the participant list when the current user goes to the participant lists in user detail mode.

      • In administration>Users>Permissions>User policies uncheck all fields in "Show user identity"
      • Login as a student and configure the profile to "Hide my email address from every one"
      • Enter in a course and click the participant list
      • Change from brief mode to "User details"
      • The email should not be displayed for this student (previously the mail was displayed when currentuser)

      TEST 2:
      Email should be displayed in the user profile even when email is not selected if the user allow it in his profile.

      • Edit the student profile to "Allow only other course members to see my email address"
        Email should be displayed in the profile page for the currentuser.
      • Login as other student in the same course... The mail should be displayed there and not just in the participant list in user detail mode.

      TEST 3:
      Users with capability moodle/user:viewalldetails should see all the information about another user that is on their profile page even when no fields are selected in the ""Show user identity" in the "User policies".

      • As admin allow the moodle/user:viewalldetails to the teacher role.
      • Edit a student profile to fill the fields: ID number, Email address, Phone, Mobile phone, Department, Institution
      • As admin enter in the student profile... you should see all these details (you are admin).
      • Login as a teacher in the same course the student you have tested. You should see this fields in the student profile.
      • Login as another student in the same course. Display the first student profile... you should see just the email of the other student (he has allowed it).
      Show
      TEST 1: Attending to the display configuration in the participant list when the current user goes to the participant lists in user detail mode. In administration>Users>Permissions>User policies uncheck all fields in "Show user identity" Login as a student and configure the profile to "Hide my email address from every one" Enter in a course and click the participant list Change from brief mode to "User details" The email should not be displayed for this student (previously the mail was displayed when currentuser) TEST 2: Email should be displayed in the user profile even when email is not selected if the user allow it in his profile. Edit the student profile to "Allow only other course members to see my email address" Email should be displayed in the profile page for the currentuser. Login as other student in the same course... The mail should be displayed there and not just in the participant list in user detail mode. TEST 3: Users with capability moodle/user:viewalldetails should see all the information about another user that is on their profile page even when no fields are selected in the ""Show user identity" in the "User policies". As admin allow the moodle/user:viewalldetails to the teacher role. Edit a student profile to fill the fields: ID number, Email address, Phone, Mobile phone, Department, Institution As admin enter in the student profile... you should see all these details (you are admin). Login as a teacher in the same course the student you have tested. You should see this fields in the student profile. Login as another student in the same course. Display the first student profile... you should see just the email of the other student (he has allowed it).
    • Affected Branches:
      MOODLE_33_STABLE

      Description

      Roles allowed with moodle/user:viewalldetails should be able to see all the identity fields in the users profile.

      https://docs.moodle.org/33/en/Capabilities/moodle/user:viewalldetails

      but now this is only posible checking the fields in the showuseridentity in the admin>Users>User policies

      https://docs.moodle.org/33/en/User_policies#Show_user_identity

      This feature is designed to add extra columns in users lists, like the participants or grader. If you check a few fields (email, phone, mobile phone...) too many columns are added in those views...

      In my opinion... roles with the moodle/user:viewalldetails should see all the identity fields in the profiles even if no field is checked in the CFG->showuseridentity

      I have detected other problems with the email identity field. Users are able to set the visibility of email in their profiles... but the email never is displayed in their profiles until the administrator check this mail in the CFG->showuseridentity... that is weird... students think that something is not working... and more weird is that the mail is been displayed in the participants list when you change the default "brief" mode to the "user details" (up-right corner in the participants list).

      By other hand users with "Hide my email address from everyone" in sites with email in the CFG->showuseridentity can see their mail in their profile view and another time they think their mail is visible for everybody. A user with "Hide my email address from everyone" setting should just see his mail when editing his profile.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                marcoblancas Isaac Marco Blancas
                Participants:
                Component watchers:
                Amaia Anabitarte, Bas Brands, Carlos Escobedo, Sara Arjona (@sarjona), Víctor Déniz Falcón
              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: