Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-61971

Warn when downloading GDPR export over HTTP

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Fixed
    • Affects Version/s: 3.3.5, 3.4.2, 3.5
    • Fix Version/s: 3.5
    • Component/s: Privacy
    • Labels:
    • Testing Instructions:
      Hide
      Moodle 3.5 - HTTP site:
      1. Login as admin.
      2. Visit [site]/admin/tool/dataprivacy/datarequests.php
      3. CONFIRM a warning message appears, reading: "Any data downloaded from this site may not be encrypted. Please contact your system administrator and request that they install SSL on this site."
      4. Visit [site]/admin/tool/dataprivacy/mydatarequests.php
      5. CONFIRM the same warning message appears as in step 3.
      Moodle 3.5 - HTTPS site:
      1. Ensure site's config wwwroot contains a https address.
      2. Repeat steps 1-5 from Moodle 3.5 "HTTP only" instructions above, however no warning message should appear.

      Plugin version (3.3/3.4) - HTTP site:

      1. Log in as admin.
      2. Ensure the dataprivacy plugin is installed and up to date.
      3. Ensure Contact Data Protection Officer is enabled at [site]/admin/category.php?category=privacy
      4. Visit [site]/admin/tool/dataprivacy/datarequests.php
      5. CONFIRM a warning message appears, reading: "Any data downloaded from this site may not be encrypted. Please contact your system administrator and request that they install SSL on this site."
      6. Visit [site]/admin/tool/dataprivacy/mydatarequests.php
      7. CONFIRM the same warning message appears as in step 5.

      Plugin version (3.3/3.4) - HTTPS site:

      1. Ensure site's config wwwroot contains a https address.
      2. Repeat steps 1-7 from plugin "HTTP site" instructions above, however no warning message should appear.
      Show
      Moodle 3.5 - HTTP site: Login as admin. Visit [site] /admin/tool/dataprivacy/datarequests.php CONFIRM a warning message appears, reading: "Any data downloaded from this site may not be encrypted. Please contact your system administrator and request that they install SSL on this site." Visit [site] /admin/tool/dataprivacy/mydatarequests.php CONFIRM the same warning message appears as in step 3. Moodle 3.5 - HTTPS site: Ensure site's config wwwroot contains a https address. Repeat steps 1-5 from Moodle 3.5 "HTTP only" instructions above, however no warning message should appear. Plugin version (3.3/3.4) - HTTP site: Log in as admin. Ensure the dataprivacy plugin is installed and up to date. Ensure Contact Data Protection Officer is enabled at [site] /admin/category.php?category=privacy Visit [site] /admin/tool/dataprivacy/datarequests.php CONFIRM a warning message appears, reading: "Any data downloaded from this site may not be encrypted. Please contact your system administrator and request that they install SSL on this site." Visit [site] /admin/tool/dataprivacy/mydatarequests.php CONFIRM the same warning message appears as in step 5. Plugin version (3.3/3.4) - HTTPS site: Ensure site's config wwwroot contains a https address. Repeat steps 1-7 from plugin "HTTP site" instructions above, however no warning message should appear.
    • Affected Branches:
      MOODLE_33_STABLE, MOODLE_34_STABLE, MOODLE_35_STABLE
    • Fixed Branches:
      MOODLE_35_STABLE
    • Pull Master Branch:
      MDL-61971-master

      Description

      Suggestion from Martin:

      Please contact your system administrator to let them know that they need to install SSL on this site to allow features like this to work properly.

      Or something like that.

        Attachments

        1. 3.3_HTTP_datarequests.png
          3.3_HTTP_datarequests.png
          67 kB
        2. 3.3_HTTP_mydatarequests.png
          3.3_HTTP_mydatarequests.png
          59 kB
        3. 3.3_HTTPS_datarequests.png
          3.3_HTTPS_datarequests.png
          57 kB
        4. 3.3_HTTPS_mydatarequests.png
          3.3_HTTPS_mydatarequests.png
          50 kB
        5. 3.4_HTTP_datarequests.png
          3.4_HTTP_datarequests.png
          66 kB
        6. 3.4_HTTP_mydatarequests.png
          3.4_HTTP_mydatarequests.png
          60 kB
        7. 3.4_HTTPS_datarequests.png
          3.4_HTTPS_datarequests.png
          57 kB
        8. 3.4_HTTPS_mydatarequests.png
          3.4_HTTPS_mydatarequests.png
          49 kB
        9. 3.5_HTTP_datarequests.png
          3.5_HTTP_datarequests.png
          68 kB
        10. 3.5_HTTP_mydatarequests.png
          3.5_HTTP_mydatarequests.png
          65 kB
        11. 3.5_HTTPS_datarequests.png
          3.5_HTTPS_datarequests.png
          62 kB
        12. 3.5_HTTPS_mydatarequests.png
          3.5_HTTPS_mydatarequests.png
          53 kB

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Fix Release Date:
                17/May/18