Students can skip date-based access restrictions with URLs
GENERAL
TESTING
GENERAL
TESTING
Description
Activity
Show:
Details
Details
Priority
Affects versions
23 Status
Please Merge
22 Status
Please Merge
Components
Assignee
Unassigned
UnassignedReporter
Daniel Merino
Daniel MerinoCreated October 3, 2024 at 10:39 AM
Updated December 13, 2024 at 5:18 PM
If one teacher configures sections to be available in a specific date, students shouldn’t be able to see them until that date, neither to join them if they are joinable.
We have found that students can skip the date restrictions, view the sections and even join them with the same URLs they use when there are not restrictions.
This issue is present in Sakai 22 using a redirection and in master is even easier, using the same jsf URL.