Details
-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 3.7
-
Fix Version/s: 3.6.4
-
Component/s: Messages
-
Labels:
-
Testing Instructions:
-
Affected Branches:MOODLE_37_STABLE
-
Fixed Branches:MOODLE_36_STABLE
-
Epic Link:
-
Pull from Repository:
-
Pull Master Branch:
MDL-65169-master -
Pull Master Diff URL:
Description
At present, this returns all users, leaking the names of those who are not otherwise visible to the searcher.
To replicate:
- Enable site wide messaging (site admin -> messaging -> messaging settings ->Â messagingallusers)
- Create some users on the site.
- Enrol a user (student 1) as a student in course 1
- Enrol another user (student 2) as a student in course 2
- As student 1, search for student 2.
- Notice you can see them in the search results. You should not be able to, given their profile is not visible to you anywhere. You can confirm this by trying to view their profile either at course or site level.
Attachments
Issue Links
- has to be done before
-
MDL-64671 Add behat test for new message drawer to search
-
- Open
-
- is blocked by
-
MDL-65170 Messaging: separate groups mode not considered by search results filtering
-
- Closed
-
-
MDL-65439 Add behat test for new UI to manage messaging preferences to 3.6 (backport of MDL-64665)
-
- Closed
-
- will help resolve
-
MDL-65023 Messaging search: course contacts are found by everyone, despite not sharing a course, nor being a contact.
-
- Closed
-