Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-63288

Messaging: Extend user search API to properly check user visibility in course/site

XMLWordPrintable

    • Icon: Improvement Improvement
    • Resolution: Deferred
    • Icon: Minor Minor
    • None
    • 3.6
    • Messages

      Scope:
      Assumes the search APIs have been updated - as per MDL-63282.

      • When searching, and specifically when generating the 'User' results (as opposed to 'Message' results), we need to make sure we only return those users who are either:
        • Contacts of the current user or;
        • Are visible to the current user, either within his course (if site-wide messaging is disabled), or in a site (is site-wide messaging is enabled).
      • 'Visibility' may entail checking several capabilities, mainly those around viewing user names, or the ability to view course participants. Possibly identity fields, but hopefully not.

      This is key to maintaining a consistency with what users can see in other areas of the UI (in terms of user details), and with what details are returned in the messaging search results.

            jaked Jake Dallimore
            jaked Jake Dallimore
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - 3 days
                3d
                Remaining:
                Remaining Estimate - 3 days
                3d
                Logged:
                Time Spent - Not Specified
                Not Specified

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.