Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-66648

There is no link to Full Profile on Course Profile page unless user has a system role.

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 3.6.4
    • Fix Version/s: None
    • Component/s: User management
    • Labels:
    • Affected Branches:
      MOODLE_36_STABLE

      Description

      Teacher must be assigned a SYSTEM role with the permission moodle/user:viewdetails granted in order to see "Full Profile" link on the student's Course Profile page.

      However, a teacher can access a user's "Full Profile" page via a direct URL regardless of whether they have a site level role assigned or not.

      Video Demo of issue:  https://www.screencast.com/t/bUoPEXfzlYtd

      If the teacher can get to the Full Profile Page via URL manipulation, then they are not truly being denied the privilege of viewing a user's full profile. Since they are not being denied permission to the full profile page, why isn't there a link to the Full Profile page on the Course Profile Page for ease of access?

      Is this working as intended or is this a bug?

      Steps to replicate:
      Create a brand new test user
      Create a brand new test course
      Enroll the user in the course
      Give user the role of Teacher
      Enroll another user in the course
      Give that user the role of student

      go to Site Admin> Users > Permissions > Define Roles
      Edit Teacher Role
      Filter capabilities for Moodle/User:viewdetails
      This permission should be ALLOWED for Teacher role
      If it's not, then the teacher cannot see a user's Course Profile
      Edit Authenticated User Role
      Authenticated user is a system level role
      Filter capabilities for Moodle/User:viewdetails
      This permission should NOT be ALLOWED for Authenticated User role

      Log out as Admin
      Login as the instructor you just created
      Go to the course that you just created
      Go to Participant list
      Click on the student that you enrolled in this course

      Note there is no link to FUll Profile under the Miscellaneoud menu of the Course Profile page

      Replicated on Moodle 3.5.3 (Build: 20181112); Moodle 3.6.3 (Build: 20190311)
      Replicated on themes: Boost, Clean, More

       

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              twilson50 Timma Wilson
              Participants:
              Component watchers:
              Amaia Anabitarte, Carlos Escobedo, Sara Arjona (@sarjona), Víctor Déniz Falcón
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 10 minutes
                10m