You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description
Currently a Opencast Block user can import every series he want's into his Moodle course, if he knows the series id.
He then can add, view and delete events in that series in Opencast from Moodle.
I don't see this as big issue, since you'll first need to get the series id from somewhere. Also I'm not sure if it is even practically/possible to check access rights to a series from Moodle in Opencast with the roles provided by the Moodle Role Provider.
But since the issue came up, I wanted to raise it and get other peoples opinions.
Steps to reproduce:
Go to Opencast Block index.php
Click "Manage series"
Import a series you don't have access to in Opencast into your Moodle course
The text was updated successfully, but these errors were encountered:
Well, it is usual that teachers can manipulate content which has been created by other teachers WITHIN ONE COURSE. But if Moodle users are able to manipulate any Series of ANY COURSE it is not acceptable in the Moodle world.
IMHO it is a huge bug.
Description
Currently a Opencast Block user can import every series he want's into his Moodle course, if he knows the series id.
He then can add, view and delete events in that series in Opencast from Moodle.
I don't see this as big issue, since you'll first need to get the series id from somewhere. Also I'm not sure if it is even practically/possible to check access rights to a series from Moodle in Opencast with the roles provided by the Moodle Role Provider.
But since the issue came up, I wanted to raise it and get other peoples opinions.
Steps to reproduce:
The text was updated successfully, but these errors were encountered: