Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-70481

Students can work out each other's group membership using participants filter

    XMLWordPrintable

    Details

    • Affected Branches:
      MOODLE_39_STABLE

      Description

      If $CFG->hiddenuserfields contains 'groups', users who don't have the capability to view hidden users fields should not have access to the groups filter on the participants page, otherwise they can use it to work out the group membership of other users on the course. This represents a potential privacy issue.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              tonybutler Tony Butler
              Participants:
              Component watchers:
              Andrew Lyons, Dongsheng Cai, Huong Nguyen, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze, Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Sara Arjona (@sarjona)
              Votes:
              1 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated: