Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Series privileges #378

Open
berthob98 opened this issue May 6, 2024 · 1 comment
Open

Series privileges #378

berthob98 opened this issue May 6, 2024 · 1 comment
Labels

Comments

@berthob98
Copy link

Description
Currently a Opencast Block user can import every series he want's into his Moodle course, if he knows the series id.
He then can add, view and delete events in that series in Opencast from Moodle.

I don't see this as big issue, since you'll first need to get the series id from somewhere. Also I'm not sure if it is even practically/possible to check access rights to a series from Moodle in Opencast with the roles provided by the Moodle Role Provider.
But since the issue came up, I wanted to raise it and get other peoples opinions.

Steps to reproduce:

  • Go to Opencast Block index.php
  • Click "Manage series"
  • Import a series you don't have access to in Opencast into your Moodle course
@bluetom bluetom added the bug label Nov 9, 2024
@bluetom
Copy link
Contributor

bluetom commented Nov 9, 2024

Well, it is usual that teachers can manipulate content which has been created by other teachers WITHIN ONE COURSE. But if Moodle users are able to manipulate any Series of ANY COURSE it is not acceptable in the Moodle world.
IMHO it is a huge bug.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants