Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-62558

Provide a summarised (read-only) view of the data registry configuration

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide
      1. Log in as the administrator.
      2. Go to "Site administration > Users > Privacy and policies > Data registry"
      3. Click on the Edit button and "categories"
      4. Add a few different categories.
      5. Go back to the main page (Data registry).
      6. Click on the Edit button and "purposes"
      7. Add a few different purposes with multiple Lawful bases and Sensitive personal data proecessing reasons.
      8. Go back to the main page (Data registry).
      9. Add a category and purpose to the Site.
      10. Add a category and purpose to the User.
      11. Click the set defaults button.
      12. Add defaults to the course categories, courses, activity modules, and the blocks.
      13. At the bottom of the page (in the footer) click the link "Data retention summary"
      14. Check that the summary shows the correct category and purpose information for each section.
      15. Change the defaults for some of the sections and set some of them to inherit.
      16. Go back to the summary page.
      17. Check that the sections that inherit, do so from the parent context. (activities -> course -> course category -> site)
      18. Log out and log back in as a guest user.
      19. At the bottom of the page (in the footer) click the link "Data retention summary"
      20. Check that you have access to this page.
      21. Log out and log in as a user.
      22. Go to the user's profile page.
      23. Check that there is a link in the "Privacy and policies" section for "Data retention summary"
      24. Click the link and Check that the link takes you to the summary page.
      Show
      Log in as the administrator. Go to "Site administration > Users > Privacy and policies > Data registry" Click on the Edit button and "categories" Add a few different categories. Go back to the main page (Data registry). Click on the Edit button and "purposes" Add a few different purposes with multiple Lawful bases and Sensitive personal data proecessing reasons. Go back to the main page (Data registry). Add a category and purpose to the Site. Add a category and purpose to the User. Click the set defaults button. Add defaults to the course categories, courses, activity modules, and the blocks. At the bottom of the page (in the footer) click the link "Data retention summary" Check that the summary shows the correct category and purpose information for each section. Change the defaults for some of the sections and set some of them to inherit. Go back to the summary page. Check that the sections that inherit, do so from the parent context. (activities -> course -> course category -> site) Log out and log back in as a guest user. At the bottom of the page (in the footer) click the link "Data retention summary" Check that you have access to this page. Log out and log in as a user. Go to the user's profile page. Check that there is a link in the "Privacy and policies" section for "Data retention summary" Click the link and Check that the link takes you to the summary page.
    • Affected Branches:
      MOODLE_33_STABLE, MOODLE_34_STABLE, MOODLE_35_STABLE, MOODLE_36_STABLE
    • Fixed Branches:
      MOODLE_34_STABLE, MOODLE_35_STABLE
    • Epic Link:
    • Pull from Repository:
    • Pull 3.4 Branch:
    • Pull 3.5 Branch:
    • Pull Master Branch:
      MDL-62558-master
    • Sprint:
      GDPR Followup Sprint 1

      Description

      Provide a read-only view of the data registry including fields such as:

      • path
      • purpose
      • category
      • retention
      • legal bases

      This should be a useful summary (define what we mean by this).

      Consider: 

      • The admin needs to be able to pull an isolated report that lists all data types, their processing, and their retention period, category etc.. Into one CSV report that can be given to a user. 
      • Any user should be able to request the database information type request (rather than content) to get this report automatically through the contact the DPO dropdown.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                5 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Fix Release Date:
                  12/Nov/18