Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-38431

Add role checks and redirects to all gradebook pages

    XMLWordPrintable

    Details

    • Type: Feature Request
    • Status: RESOLVED
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 12.0
    • Fix Version/s: 12.2, 19.0
    • Component/s: Gradebook
    • Labels:
      None
    • 12 status:
      Resolved
    • Test Plan:
      Hide
      • Visit the gradebook as an instructor and copy down the url for each page (Grades, Import/Export, etc)
      • Log out and visit the gradebook as a student
      • Using the urls copied previously, attempt to visit each page as the student, confirm you are redirected back to the student page
      • Repeat the above tests with a TA (default permissions), confirm you are redirected back to the grades page
      • Repeat the above tests with a user that has no gradebook permissions (ie. doesn't have section.role.*), confirm you are redirected to an access denied page
      • Log back in as the instructor and repeat tests using the View As feature to assume other roles, confirm any redirects or messages are appropriate for the situation
      Show
      Visit the gradebook as an instructor and copy down the url for each page (Grades, Import/Export, etc) Log out and visit the gradebook as a student Using the urls copied previously, attempt to visit each page as the student, confirm you are redirected back to the student page Repeat the above tests with a TA (default permissions), confirm you are redirected back to the grades page Repeat the above tests with a user that has no gradebook permissions (ie. doesn't have section.role.*), confirm you are redirected to an access denied page Log back in as the instructor and repeat tests using the View As feature to assume other roles, confirm any redirects or messages are appropriate for the situation

      Description

      Some gradebook pages check the user's role and redirect them appropriately if they attempt to visit a page they aren't allowed to access. However, not all pages have these checks, which leads to error messages in some cases. Add checks to all remaining pages that are missing them.

      In general:

      • users with no gradebook permissions are redirected to the access denied page
      • students are redirected to the student page
      • TAs are redirected to the grades page

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                plukasew Paul Lukasewych
                Reporter:
                plukasew Paul Lukasewych
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Git Source Code