Uploaded image for project: 'Moodle app'
  1. Moodle app
  2. MOBILE-3200

Database: students can add entries in a group that doesn't belong to them (visible groups)

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Minor Minor
    • 3.9.3
    • 3.9.2
    • Database add-on
    • Hide

      Test only in one device of your choice.

      1. On the master site.
      2. Go to a database with visible groups. i.e. Database testing >
        Database using Groups > visible groups.
      3. On the website: check you only are enrolled in one group. ie. G1
      4. Back to the app: Check you can see All participants, G1 and G2.
      5. On the group picker, change groups and check you only can add entries on your groups (G1). So the + button won't be shown on the others.
      6. Select one of your groups (G1) and Click to add a new entry.
      7. Check you cannot change to the other groups from there (groups you are not enrolled are not in the selector).
      8. GO OFFLINE.
      9. Add a new entry.
      10. Edit the entry in offline and check the selector is there.
      11. Change something and save the entry.
      12. Delete the entry.
      13. Go online again.

      Now login as a teacher.

      1. Check the teacher only has one group also.
      2. Enter the database.
      3. Check you can add entries to any group (the button is present).
      4. Check you can change it also when adding a new entry.
      5. Go offline
      6. Add a new entry on G1.
      7. Edit the entry and check you can change the group.
      8. Change the group.
      9. Go back and check you are warned changes will be lost. CANCEL it.
      10. Save
      11. Edit again and check the new group has been set.
      12. Go online and sync.
      Show
      Test only in one device of your choice. On the master site. Go to a database with visible groups. i.e. Database testing > Database using Groups > visible groups. On the website: check you only are enrolled in one group. ie. G1 Back to the app: Check you can see All participants, G1 and G2. On the group picker, change groups and check you only can add entries on your groups (G1). So the + button won't be shown on the others. Select one of your groups (G1) and Click to add a new entry. Check you cannot change to the other groups from there (groups you are not enrolled are not in the selector). GO OFFLINE. Add a new entry. Edit the entry in offline and check the selector is there. Change something and save the entry. Delete the entry. Go online again. Now login as a teacher. Check the teacher only has one group also. Enter the database. Check you can add entries to any group (the button is present). Check you can change it also when adding a new entry. Go offline Add a new entry on G1. Edit the entry and check you can change the group. Change the group. Go back and check you are warned changes will be lost. CANCEL it. Save Edit again and check the new group has been set. Go online and sync.
    • MOODLE_39_STABLE
    • MOODLE_39_STABLE
    • Moodle App 3.9.3

      (While testing MOBILE-2159)

      Students can add entries database (visible groups) selecting any groups, including groups where the user don't belong

      In web depending where you come from it seems the student can add the entry but in the last moment she sees an error (https://docs.moodle.org/37/en/error/data/noaccess)

       

            pferre22 Pau Ferrer
            isabelrenedo Isabel Renedo Rouco
            Noel De Martin Noel De Martin
            Juan Leyva Juan Leyva
            Isabel Renedo Rouco Isabel Renedo Rouco
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved:

                Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.