Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-66648

There is no link to Full Profile on Course Profile page unless user has a system role.

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Fixed
    • 3.6.4, 3.7.8, 3.8.5, 3.9.2, 3.10, 4.0
    • 3.8.6, 3.9.3
    • User management

    Description

      Teacher must be assigned a SYSTEM role with the permission moodle/user:viewdetails granted in order to see "Full Profile" link on the student's Course Profile page.

      However, a teacher can access a user's "Full Profile" page via a direct URL regardless of whether they have a site level role assigned or not.

      Video Demo of issue:  https://www.screencast.com/t/bUoPEXfzlYtd

      If the teacher can get to the Full Profile Page via URL manipulation, then they are not truly being denied the privilege of viewing a user's full profile. Since they are not being denied permission to the full profile page, why isn't there a link to the Full Profile page on the Course Profile Page for ease of access?

      Is this working as intended or is this a bug?

      Steps to replicate:
      Create a brand new test user
      Create a brand new test course
      Enroll the user in the course
      Give user the role of Teacher
      Enroll another user in the course
      Give that user the role of student

      go to Site Admin> Users > Permissions > Define Roles
      Edit Teacher Role
      Filter capabilities for Moodle/User:viewdetails
      This permission should be ALLOWED for Teacher role
      If it's not, then the teacher cannot see a user's Course Profile
      Edit Authenticated User Role
      Authenticated user is a system level role
      Filter capabilities for Moodle/User:viewdetails
      This permission should NOT be ALLOWED for Authenticated User role

      Log out as Admin
      Login as the instructor you just created
      Go to the course that you just created
      Go to Participant list
      Click on the student that you enrolled in this course

      Note there is no link to FUll Profile under the Miscellaneoud menu of the Course Profile page

      Replicated on Moodle 3.5.3 (Build: 20181112); Moodle 3.6.3 (Build: 20190311)
      Replicated on themes: Boost, Clean, More

       

      Attachments

        Activity

          People

            pholden Paul Holden
            twilson50 Timma Wilson
            Mihail Geshoski Mihail Geshoski
            Eloy Lafuente (stronk7) Eloy Lafuente (stronk7)
            Anna Carissa Sadia Anna Carissa Sadia
            David Woloszyn, Huong Nguyen, Jake Dallimore, Michael Hawkins, Stevani Andolo
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:
              9/Nov/20

              Time Tracking

                Estimated:
                Original Estimate - 0 minutes
                0m
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 hour, 45 minutes
                1h 45m