Hiding rubrics grants all roles rubric.editor
Description
Attachments
Activity
Andrea Schmidt November 29, 2020 at 10:11 AM
Will mark this as verified since students are able to access their rubrics, but created for the "unhiding" behavior that allows students to see rubrics in the navigation and create/work with rubrics.
21x: https://qa21-mysql.nightly.sakaiproject.org/, build: a89edcd0
20x: https://qa20-mysql.nightly.sakaiproject.org/, build: c4181839
19x: https://qa19-mysql.nightly.sakaiproject.org/, build: 8ed2c2d6
Adrian Fish November 29, 2020 at 8:23 AM
Open a new JIRA, but I don't think it should be either critical or a blocker. All the instructor has to do it hide it again, from students, and they won't see the rubrics manager tool. This one was a blocker because it was stopping students from seeing their graded rubrics.
Andrea Schmidt November 28, 2020 at 11:25 AM
I don't think this is working as expected. I tested 21x first, then tested 22x to see if the behavior is the same:
22x: https://trunk-mysql.nightly.sakaiproject.org/, build: 4bcc078e
21x: https://qa21-mysql.nightly.sakaiproject.org/, build: a89edcd0
Since this Jira has already been merged, should I just create a new Jira?
Initially, after the rubrics tool is added, students do not see the rubrics tool in the navigation and they do not have rubric.editor permissions.
After the instructor hides the rubrics tool, the students (and TAs) then receive rubric.editor permissions, but do not see the tool in the navigation.
After the instructor unhides the rubrics tool, the student has rubric.editor permissions and is able to see the rubrics tool and work with the rubrics tool.
Adrian Fish November 24, 2020 at 12:25 PM
The main issue with this ticket was that giving students rubrics.editor made it so that they couldn't view their evaluated rubrics in tools such as assignments. rubrics.editor is the permission used as the required function to be able to see the rubrics manager tool, not actual rubrics themselves, in the tools.
What I'd do is retest this, but just from an instructor perspective. Forget about that permission being set, but just try it from an instructor and student point of view. Unless the student is given site.upd, they should never see the actual rubrics manager tool, but they should always be able to see their evaluated rubrics.
Marty Soupcoff (not active in Sakai community anymore) November 18, 2020 at 2:39 PM
& - This Jira should be re-opened. As mentioned in late Oct, he was able to still replicate on 19. I just tried on trunk and it also is still an issue. Added a screen recording of my trunk testing to jira.
Hiding the Rubrics tool grants all roles rubric.editor permission, regardless of previous permissions.
Tested on https://trunk-mysql.nightly.sakaiproject.org/
To recreate, create a new course site. Then:
Add the Rubrics to the site
Verify in Admin site's Realms for corresponding site that the site only has rubric.editor granted to Instructor role
Returning to site Go into Site Info > Tool Order, and HIDE the Rubrics tool.
Verify in Admin site's Realms for corresponding site that the site, all roles will now have rubric.editor
These actions will give all users rubrics.editor. Hard to see this as desired behaviour.
Making the Rubrics tool visible does not restore the previous permissions.
Screen recording attached.