-
Bug
-
Resolution: Fixed
-
Major
-
4.0.6, 4.0.7, 4.0.8, 4.0.9, 4.0.10, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.2, 4.2.1, 4.2.2, 4.3
DESCRIPTION
In Moodle 4.0 the role capabilities “course:activityvisibility”, "moodle/course:viewhiddenactivities", "moodle/course:viewhiddensections" and "moodle/course:sectionvisibility" do not allow the course edit menu (kebab) to display. This makes the permission unusable unless the capability “course:manageactivities” is allowed (which allows the edit menu/kebab to display). Prior to 4.0, having the “activity visibility” capability, enabled the “edit” menu to display next to activities without the need for the “manage activities” capability.
STEPS TO REPLICATE
1. Use any role or create a new course level role. For testing, a new role was created using the “Non editing Teacher” template. Make sure that the "course:activityvisibility" capability is set to “allow”, and the "course:manageactivities" is not set.
2. Create a course and add a few activities.
3. Enroll a user into the course and assign them the role from step 1.
4. Log in as the user in step 3 and navigate to the course.
5. Turn editing on in the course.
OBSERVED BEHAVIOR:
Even though the permission has been given that allows the user to control activity visibility, the kebab settings menu isn’t displayed, which prevents the user from hiding/showing the activity.
Screen shot of missing edit menu/kebab:
Screen shot of kebab showing only after adding the permission "Manage Activities" with the "activity visibility permission"
EXPECTED BEHAVIOR:
Having the permission activity visibility should allow the settings kebab to display which should then have the setting to Hide/show.
Screen shot of edit menu displaying in 3.11.11 with only "Activity visibility" allowed.
REPLICATION LOCATIONS
Moodle Versions 4.0.5, 4.1.1
IMPACT
The permission “activity visibility” is unusable unless another permission ( ex. manage activities) is allowed which brings up the edit menu (kebab).
- has been marked as being related by
-
MDL-81397 Missing capability checks hide section editing controls during AJAX reloads
- Closed
-
MDL-80168 PR only: MDL-77572 - In Moodle 4.x the role capabilities "moodle/course:viewhiddenactivities", "moodle/course:activityvisibility", "moodle/course:viewhiddensections", "moodle/course:sectionvisibility" does not allow the course edit menu (kebab) to display
- Closed
- is duplicated by
-
MDL-78482 course:activityvisibility permission not sufficient to change activity visibility
- Closed
- is parent of
-
MDL-82502 Course edit menu issues when manageactivities is unset
- Closed
- Testing discovered
-
MDL-80326 Availability shouldn't be changed when the user hasn't the right capability
- Closed