-
Improvement
-
Resolution: Deferred
-
Minor
-
None
-
3.6
-
MOODLE_36_STABLE
Scope:
Assumes the search APIs have been updated - as per MDL-63282.
- When searching, and specifically when generating the 'User' results (as opposed to 'Message' results), we need to make sure we only return those users who are either:
- Contacts of the current user or;
- Are visible to the current user, either within his course (if site-wide messaging is disabled), or in a site (is site-wide messaging is enabled).
- 'Visibility' may entail checking several capabilities, mainly those around viewing user names, or the ability to view course participants. Possibly identity fields, but hopefully not.
This is key to maintaining a consistency with what users can see in other areas of the UI (in terms of user details), and with what details are returned in the messaging search results.