Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-74584

Update BBB integration to include a DPA step for GDPR

    XMLWordPrintable

Details

    • MOODLE_400_STABLE
    • MOODLE_400_STABLE
    • MDL-74584-400-v1
    • MDL-74584-master-v1
    • Hide

      Test 1

      Prerequisites

      Moodle instance installed without the patch included

      1. Login as Admin
      2. Create a course
      3. Create a BigBlueButton activity in the course
      4. Apply the patch and run the upgrade
      5. Go to Site administration > General > Messaging > Notification settings
        1. Enable notifications for "Notices about minor problems" for the "Web" interface.
        2. Press "Save changes"
      6. Run cron (php admin/cli/cron.php)
      7. After the cron tasks have been completed, log in as admin.
        1. confirm that you have received a notification stating that the BBB module is disabled.
      8. View the full notification
        1. confirm that the full notification states that the BBB has been disabled and the admin needs to confirm the acceptance of the data processing agreement related to the default BBB service provider
      9. Click on the link 'Go to: Manage activities' at the bottom of the notification
      10. In the Manage activities page 
        1. confirm that the BigBlueButton activity is disabled
      11. Attempt to enable the plugin
        1. confirm that a modal form is displayed requesting to confirm the acceptance of the data processing agreement related to the default BBB service provider
      12. Click on the 'data processing agreement' link present in the content text in the modal form.
        1. confirm that the following URL is opened in a new window 'https://blindsidenetworks.com/dpa-moodle-free-tier'
      13. Without checking the 'agree' checkbox, press on the Enable button in the modal form
        1. confirm that you are not able to enable the BBB plugin without checking the 'agree' checkbox
      14. Now check the 'accept' checkbox and press the 'Enable' button.
        1. confirm that the BBB plugin is now enabled.
      15. Try disabling and then enabling the BBB plugin again
        1. confirm that the 'accept dpa' modal form is NOT displayed

      Test 2

      Prerequisites

      Moodle instance installed without the patch included

      1.  Login as Admin
      2. Create a course
      3. Create a BBB activity in the course
      4. Go to Site administration > Plugins > BigBlueButton > General settings
        1. confirm that you can see a note in the General settings section related to the data protection obligations and the data processing agreement related to the default service provider.
      5. Click on the 'data processing agreement' link from the note
        1. confirm that the following URL is opened in a new window 'https://blindsidenetworks.com/dpa-moodle-free-tier'
      6. Back in the BBB general settings page, change the value for the 'BigBlueButton server URL' to 'https://example.com' and save the changes.
      7. Apply the patch and run the upgrade
      8. Go to Site administration > General > Messaging > Notification settings
        1. Enable notifications for "Notices about minor problems" for the "Web" interface.
        2. Press "Save changes"
      9. Run cron (php admin/cli/cron.php)
      10. After the cron tasks have been completed, log in as admin.
        1. confirm that you didn't receive any notifications related to the BBB activity
      11. Go to Site administration > Plugins > Manage activities
        1. confirm that the BBB plugin is still enabled
      12. Try disabling and then enabling the BBB plugin again
            confirm that 'accept dpa' modal form is NOT displayed

      Test 3

      Prerequisites

      Moodle instance installed with the patch included

      1. Login as Admin
      2. Go to Site administration > Plugins > Manage activities
        1. confirm that the BigBlueButton activity is disabled by default
      3. Attempt to enable the plugin
        1. confirm that a modal form is displayed requesting to confirm the acceptance of the data processing agreement related to the default BBB service provider
      4. Without checking the 'agree' checkbox, press on the Enable button
        1. confirm that you are not able to enable the BBB plugin without checking the 'agree' checkbox
      5. Now check the 'accept' checkbox and press the 'Enable' button.
        1. confirm that the BBB plugin is now enabled.
      6. Try disabling and then enabling the BBB plugin again
        1. confirm that the 'accept dpa' modal form is NOT displayed 
      Show
      Test 1 Prerequisites Moodle instance installed without the patch included Login as Admin Create a course Create a BigBlueButton activity in the course Apply the patch and run the upgrade Go to Site administration > General > Messaging > Notification settings Enable notifications for "Notices about minor problems" for the "Web" interface. Press "Save changes" Run cron (php admin/cli/cron.php) After the cron tasks have been completed, log in as admin. confirm that you have received a notification stating that the BBB module is disabled. View the full notification confirm that the full notification states that the BBB has been disabled and the admin needs to confirm the acceptance of the data processing agreement related to the default BBB service provider Click on the link 'Go to: Manage activities' at the bottom of the notification In the Manage activities page  confirm that the BigBlueButton activity is disabled Attempt to enable the plugin confirm that a modal form is displayed requesting to confirm the acceptance of the data processing agreement related to the default BBB service provider Click on the 'data processing agreement' link present in the content text in the modal form. confirm that the following URL is opened in a new window 'https://blindsidenetworks.com/dpa-moodle-free-tier' Without checking the 'agree' checkbox, press on the Enable button in the modal form confirm that you are not able to enable the BBB plugin without checking the 'agree' checkbox Now check the 'accept' checkbox and press the 'Enable' button. confirm that the BBB plugin is now enabled. Try disabling and then enabling the BBB plugin again confirm that the 'accept dpa' modal form is NOT displayed Test 2 Prerequisites Moodle instance installed without the patch included  Login as Admin Create a course Create a BBB activity in the course Go to Site administration > Plugins > BigBlueButton > General settings confirm that you can see a note in the General settings section related to the data protection obligations and the data processing agreement related to the default service provider. Click on the 'data processing agreement' link from the note confirm that the following URL is opened in a new window 'https://blindsidenetworks.com/dpa-moodle-free-tier' Back in the BBB general settings page, change the value for the 'BigBlueButton server URL' to 'https://example.com' and save the changes. Apply the patch and run the upgrade Go to Site administration > General > Messaging > Notification settings Enable notifications for "Notices about minor problems" for the "Web" interface. Press "Save changes" Run cron (php admin/cli/cron.php) After the cron tasks have been completed, log in as admin. confirm that you didn't receive any notifications related to the BBB activity Go to Site administration > Plugins > Manage activities confirm that the BBB plugin is still enabled Try disabling and then enabling the BBB plugin again     confirm that 'accept dpa' modal form is NOT displayed Test 3 Prerequisites Moodle instance installed with the patch included Login as Admin Go to Site administration > Plugins > Manage activities confirm that the BigBlueButton activity is disabled by default Attempt to enable the plugin confirm that a modal form is displayed requesting to confirm the acceptance of the data processing agreement related to the default BBB service provider Without checking the 'agree' checkbox, press on the Enable button confirm that you are not able to enable the BBB plugin without checking the 'agree' checkbox Now check the 'accept' checkbox and press the 'Enable' button. confirm that the BBB plugin is now enabled. Try disabling and then enabling the BBB plugin again confirm that the 'accept dpa' modal form is NOT displayed 
    • 5
    • 4.1 holding pattern

    Description

      Currently in Moodle 4.0 the BBB integration is enabled by default, and linked to the free tier service of blindsidenetworks, with servers in Canada.

      While there are multiple options to use alternative servers, including self-hosting, there is a risk that sites who need to comply with GDPR are not aware that data for the free tier by default is stored in Canada.

      To create a clearer path for enabling the BBB integration, and choosing where to store the data, we need to make the following changes:

      1. Disable the plugin by default for new installs and existing sites that are using the the default free tier service
      2. As part of enabling the plugin include a checkbox where the site admin can agree to blindsidenetworks' Data Processing Agreement (DPA) if using the default free tier service

      Agreement to the DPA can be a checkbox on the settings page, or a in separate pop-up.

      For sites that are upgrading already have the plugin in use we should leave their existing settings in place to not disturb their operations.

      For sites that are upgrading while using a different service other than the default, we should not disable the plugin nor ask for confirmation of the acceptance of the current DPA as they have voluntarily chosen this service.

      We will need to provide clear language to the admin. 

      First draft:

      In order to meet with your data protection obligations, as a data controller, prior to enabling this plugin, you may need to ensure that you have read and accepted the data processing agreement with Blindside Networks Inc. at https://blindsidenetworks.com/dpa-moodle-free-tier.

      Language to be further fine-tuned. We may also want to include a link to the other service providers, e.g. https://bigbluebutton.org/commercial-support/ 

      Attachments

        1. MDL-74584-test03.jpg
          MDL-74584-test03.jpg
          138 kB
        2. MDL-74584-test02.jpg
          MDL-74584-test02.jpg
          85 kB
        3. MDL-74584-test01.jpg
          MDL-74584-test01.jpg
          166 kB
        4. enabling_bbb_plugin-default_config.png
          enabling_bbb_plugin-default_config.png
          125 kB
        5. bbb_general_settings.png
          bbb_general_settings.png
          141 kB
        6. bbb_disabled_notification.png
          bbb_disabled_notification.png
          31 kB
        7. bbb_disabled_notification_full.png
          bbb_disabled_notification_full.png
          72 kB

        Issue Links

          Activity

            People

              Geshoski Mihail Geshoski
              sanderbangma Sander Bangma
              Jake Dallimore Jake Dallimore
              Jun Pataleta Jun Pataleta
              Ferran Recio Ferran Recio
              Jesus Federico, Laurent DAVID
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:
                9/May/22

                Time Tracking

                  Estimated:
                  Original Estimate - 0 minutes
                  0m
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 days, 1 hour, 1 minute
                  2d 1h 1m