Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-62544

Allow admins (and DPOs) to make subject access requests on behalf of users

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 3.4.2, 3.5, 3.6
    • Fix Version/s: 3.5.1
    • Component/s: Privacy
    • Testing Instructions:
      Hide
      1. As an administrator (or DPO user) go to: Site administration / Users / Privacy and policies / Data requests.
      2. Click the "New request" button.
      3. Verify that a request form is shown, allowing you to specify a user and the nature of a request.

      Does not need to be tested: If the form is shown you can follow through with the process. This is unaffected by this change.

      Show
      As an administrator (or DPO user) go to: Site administration / Users / Privacy and policies / Data requests. Click the "New request" button. Verify that a request form is shown, allowing you to specify a user and the nature of a request. Does not need to be tested: If the form is shown you can follow through with the process. This is unaffected by this change.
    • Affected Branches:
      MOODLE_34_STABLE, MOODLE_35_STABLE, MOODLE_36_STABLE
    • Fixed Branches:
      MOODLE_35_STABLE
    • Epic Link:
    • Pull 3.5 Branch:
    • Pull Master Branch:
      MDL-62544-master
    • Sprint:
      Privacy Sprint 1

      Description

      If the contactdataprotectionofficer config option is disabled, users are not allowed to make subject access requests (SARs) on their own. However, neither are admins: If I click on "New request" in admin/tool/dataprivacy/datarequests.php, the next page will throw a notice: "Please contact the Data Protection Officer as described in the privacy policy."

      Expected behaviour

      As an administrator or DPO I am allowed to create SARs on behalf of a user, even if site config prohibits this for regular users.

      Otherwise, administrators and DPOs will be unable to comply with SARs that will be received via other channels.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              jan.dagefoerde Jan Dageförde
              Reporter:
              jan.dagefoerde Jan Dageförde
              Peer reviewer:
              Víctor Déniz Falcón
              Integrator:
              Jun Pataleta
              Tester:
              Gladys Basiana
              Participants:
              Component watchers:
              Andrew Nicols, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze
              Votes:
              8 Vote for this issue
              Watchers:
              11 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                9/Jul/18

                  Time Tracking

                  Estimated:
                  Original Estimate - 0 minutes
                  0m
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 15 minutes
                  15m