-
Bug
-
Resolution: Unresolved
-
Minor
-
None
-
3.9.3
-
MOODLE_39_STABLE
If $CFG->hiddenuserfields contains 'groups', users who don't have the capability to view hidden users fields should not have access to the groups filter on the participants page, otherwise they can use it to work out the group membership of other users on the course. This represents a potential privacy issue.