Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-67523

For non-admin user the site administration categories are displayed as links that show errors

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide
      • Assign role "Manager" to a user in the system context
      • Log in as this user
      • Go to Site administration
      • Click on categories names (i.e. "Users", "Badges", etc), make sure they display the list of subsections and only the subsections available to this user are displayed
      • Login as admin and find some category that is not available for the Manager, for example "Plugins>Activity modules", copy the URL
      • Login as manager and go to this URL, make sure you see an error
      Show
      Assign role "Manager" to a user in the system context Log in as this user Go to Site administration Click on categories names (i.e. "Users", "Badges", etc), make sure they display the list of subsections and only the subsections available to this user are displayed Login as admin and find some category that is not available for the Manager, for example "Plugins>Activity modules", copy the URL Login as manager and go to this URL, make sure you see an error
    • Affected Branches:
      MOODLE_38_STABLE, MOODLE_39_STABLE
    • Fixed Branches:
      MOODLE_38_STABLE
    • Pull 3.8 Branch:
    • Pull Master Branch:
      MDL-67523-master

      Description

      • Assign role "Manager" to a user in the system context
      • Log in as this user
      • Go to Site administration
      • All sections names are displayed as links but clicking on them shows an exception

      Sorry, but you do not currently have permissions to do that (Change site configuration).
       
      More information about this error
      Debug info:
      Error code: nopermissions
      Stack trace:
       
          line 860 of /lib/accesslib.php: required_capability_exception thrown
          line 3064 of /lib/moodlelib.php: call to require_capability()
          line 33 of /admin/category.php: call to require_admin()
      

      We either need to not throw an exception or not show them as links

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              marina Marina Glancy
              Reporter:
              marina Marina Glancy
              Peer reviewer:
              Paul Holden
              Integrator:
              Eloy Lafuente (stronk7)
              Tester:
              Eloy Lafuente (stronk7)
              Participants:
              Component watchers:
              Andrew Nicols, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                13/Jan/20

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 hour, 5 minutes
                  1h 5m