-
Improvement
-
Resolution: Fixed
-
Critical
-
4.0, 4.0.4
-
MOODLE_400_STABLE
-
MOODLE_401_STABLE
-
MDL-74643-master -
-
3
-
Team Hedgehog 4.1 sprint 0 rev, Team Hedgehog 4.1 pre 1.1
Updated issue description / requirements (by michaelh):
There are some valid use cases where site support may wish for anyone visiting the site to have access to contact site support (such as students/teachers who are having difficulty accessing their account, so need assistance without logging in). To help mitigate any misuse of that form, the original implementation of the feature therefore included a warning message at the top of the email where it was sent by an unauthenticated user, and the contact form will use ReCaptcha if implemented on the site. There is also the option to use a custom support URL (which in turn may include its own verification methods).
However, based on feedback received on the original version of this issue and other information from the community, we need some more granular controls in place, for cases where those methods are unavailable/insufficient (for example, if ReCaptcha is not an option due to privacy/GDPR implications).
Combining the information at hand for a single, simple solution, I am proposing the following requirements:
- A new admin setting to control the availability of "contact site support" in the footer, and access to the contact form itself.
- There should be 3 levels of access available: available to authenticated user only (default), available to anyone visiting the site (which will be the same as the current 4.0 behaviour), and disabled.
- Since sites on 4.0 or above already have this available to all, to maintain consistency, they will retain the current behaviour when upgrading (but can obviously change the setting if they wish). New sites and those upgrade from 3.11 or earlier will use the new default of authenticated users only.
- This should be covered by behat tests.
================================
Original issue description by dag:
if you can't or aren't allowed to use ReCaptcha for privacy reasons, open the Moodle system for automatic SPAMs via /user/contactsitesupport.php
Solution idea: a new capability which can then be taken away from e.g. guests
Edit: this right should also suppress the display via question mark
- blocks
-
MOBILE-4059 Add an easy way to contact site support
-
- Closed
-
- has a non-specific relationship to
-
MDL-73964 Update support site/email usage to use new link format and granular access control
-
- Closed
-
-
IDEA-23 Make it easier for Moodle end users to access support from their organisation.
-
- Cancelled
-
- is blocked by
-
-
- Closed
-
