Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-62544

Allow admins (and DPOs) to make subject access requests on behalf of users

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.4.2, 3.5, 3.6
    • Fix Version/s: 3.5.1
    • Component/s: Privacy
    • Testing Instructions:
      Hide
      1. As an administrator (or DPO user) go to: Site administration / Users / Privacy and policies / Data requests.
      2. Click the "New request" button.
      3. Verify that a request form is shown, allowing you to specify a user and the nature of a request.

      Does not need to be tested: If the form is shown you can follow through with the process. This is unaffected by this change.

      Show
      As an administrator (or DPO user) go to: Site administration / Users / Privacy and policies / Data requests. Click the "New request" button. Verify that a request form is shown, allowing you to specify a user and the nature of a request. Does not need to be tested: If the form is shown you can follow through with the process. This is unaffected by this change.
    • Affected Branches:
      MOODLE_34_STABLE, MOODLE_35_STABLE, MOODLE_36_STABLE
    • Fixed Branches:
      MOODLE_35_STABLE
    • Epic Link:
    • Pull 3.5 Branch:
    • Pull Master Branch:
      MDL-62544-master
    • Sprint:
      Privacy Sprint 1

      Description

      If the contactdataprotectionofficer config option is disabled, users are not allowed to make subject access requests (SARs) on their own. However, neither are admins: If I click on "New request" in admin/tool/dataprivacy/datarequests.php, the next page will throw a notice: "Please contact the Data Protection Officer as described in the privacy policy."

      Expected behaviour

      As an administrator or DPO I am allowed to create SARs on behalf of a user, even if site config prohibits this for regular users.

      Otherwise, administrators and DPOs will be unable to comply with SARs that will be received via other channels.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                8 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Fix Release Date:
                  9/Jul/18

                  Time Tracking

                  Estimated:
                  Original Estimate - 0 minutes
                  0m
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 15 minutes
                  15m