Details
-
Bug
-
Status: Closed
-
Blocker
-
Resolution: Fixed
-
3.5.8, 3.6.6, 3.7.2, 3.8
-
MOODLE_35_STABLE, MOODLE_36_STABLE, MOODLE_37_STABLE, MOODLE_38_STABLE
-
MOODLE_35_STABLE, MOODLE_36_STABLE, MOODLE_37_STABLE
-
MDL-66683-master -
Description
We fixed a bug with course creation whereby the default course role was given regardless of whether it should be.
Essentially, in order to assign a role, you need two things:
1) The moodle/role:assign capability; and
2) The ability to assign the specified role (Site administration -> Users -> Define role -> Allow role assignments)
Unfortunately the default "Course creator" role has neither of these.
We may need to consider adding this to stables in an upgrade step, but this is unusual for stables. I suspect we should accept such a change in our next minor release and grant the assign to the coursecreator archetype for the current default role only.
Needs:
- the moodle/role:assign capability; and
- the ability to assign the specified role.
The coursecreator role as neither of these
https://moodle.org/mod/forum/discuss.php?d=390792#p1576261
Further information relating to this from urpokarhu:
Hello,
It seems that
https://tracker.moodle.org/browse/MDL-66181
https://moodle.org/mod/forum/discuss.php?d=391031
is badly implemented since I didn't find any documentation concerning this change in moodle documentation.
Suddenly making this scope of a change should be better documented in Moodle documentation and also you should inform moodle administratos if this scope of a change is going to happen (one forum post doesn't really cut it).
To get it working again you now have to give coursecreator moodle/role:assign before they can get teacher role on the courses they create.
Also moodle/role:assign is concerned as a XSS-risk, risk of gaining other users information and users can spam other useers.