Draft Announcements on a site are viewable in student dashboard
Description
Attachments
- 22 Oct 2014, 11:13 AM
- 22 Oct 2014, 11:13 AM
- 22 Oct 2014, 11:13 AM
- 22 Oct 2014, 11:13 AM
Activity
Earle Nietzel January 15, 2015 at 9:27 AM
Removed 10 x merge status as this not a 10 issue.
Hudson CI Server October 30, 2014 at 6:06 PM
SUCCESS: Integrated in sakai-trunk-java-1.7 #511 (See http://builds.sakaiproject.org:8080/job/sakai-trunk-java-1.7/511/)
https://sakaiproject.atlassian.net/browse/DASH-328#icft=DASH-328 check item availablity first before adding dashboard links (zqian@umich.edu: rev 315026)
Jeff A Ziegler October 30, 2014 at 4:07 PM
TESTED ON CTDev - 2.9P_315037
BU = Become User
Student users for testing: jeffaz
BU to a student, visual check to ascertain that there are no announcements from the test site currently in their Dashboard
Remove all preexisting announcements from test site
post 2 announcements, one published, one in draft
Add student user to test site
BU to same student. check to see which announcements show up (ONLY THE PUBLISHED ANNOUNCEMENT IS SHOWING)
Again, post 2 announcements, one published, one in draft
BU to same student. check to see which announcements show up (ONLY THE PUBLISHED ANNOUNCEMENT SHOWS UP)
Edit a draft announcement and publish
BU to same student. check to see which announcements show up (THE PUBLISHED ANNOUNCEMENT IS NOW VISIBLE IN THE DASH, DRAFTS ARE NOT LISTED IN DASH)
Remove student user(s) from test site.
BU Student to see what is visible in Dash (PUBLISHED ANNOUNCEMENTS ARE STILL LISTED)
Jeff A Ziegler October 30, 2014 at 2:07 PM
TESTED ON CTPROD:
Student users for testing: jeffaz, sband
BU to a student, visual check to ascertain that there are no announcements from the test site in their Dashboard
post 2 announcements, one published, one in draft
Add student user to test site
Bu to same student. check to see which announcements show up (BOTH)
Again, post 2 announcements, one published, one in draft
BU to same student. check to see which announcements show up (ONLY THE PUBLISHED ANNOUNCEMENT SHOWS UP )
Post one more announcement in draft
BU to same student. check to see which announcements show up (NO CHANGE, SAME ANNOUNCEMENTS AS BEFORE, BOTH DRAFT AND PUBLISHED ARE VISIBLE, BOTH NEW DRAFTS ADDED AFTER THE STUDENT IS ON THE SITE DO NOT SHOW)
Remove student user(s) from test site.
BU Student to see what is visible in Dash (ALL ANNOUNCEMENTS PREVIOUSLY DISPLAYED ARE STILL LISTED, HOWEVER, THE STUDENT CAN NO LONGER SEE THE CONTENT, ONLY THE LIST)
Zhen Qian October 30, 2014 at 12:56 PM
r315026.
Need to check the entity item availability before adding dashboard item links for newly added users.
In Dashboard, Students are able to view the content of draft announcements on the course site. Clicking on the View in Site button associated with a draft announcement will take them to the site where they are denied access to view the announcement(s), nonetheless, the content is still visible within their Dashboard. Screenshots attached.
It seems that Group permissions will override the perms that allow unauthorized access to the content of the draft announcements so the workaround is to create a Group (e.g., Announcements Draft Group) for site maintainers and restrict access and availability to that Group for all draft announcements. This will remove those announcements from the Dashboard of anyone who is not a member of that group.
Incident # INC0296250
Site ID: fc875b73-4203-4e69-913d-ba1bae3ea428
test students: jeffaz, sband