Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-43334

Content: Allow users greater control over attachments they uploaded in various tools.

    XMLWordPrintable

    Details

    • Test Plan:
      Hide

      Steps to reproduce for Email Archive

      1. Make sure the ability to both receive and send email is enabled in the server.
      2. Create a site with Email Archive added.
      3. Create a user account for yourself with your email address from which to send.
      4. Create another user account where you add a different valid email address, such that you will be able to receive the email you send.
      5. Add your first user account (email sender) as an owner/instructor in your site.
      6. Add your second user (email recipient) as a member in your site.
      7. Send an email with a file attachment to the email archive.
      8. Make sure your recipient email address got the email.
      9. As site owner/instructor, go to Email Archive and delete the email. Log out of Sakai.
      10. Log in as the site member, access the link to the attachment from the email you received. Issue: The site member can still access the attachment.

      Steps to reproduce for quiz

      1. Create a site with Resources and Tests & Quizzes, and at least one student.
      2. Upload an image in Resources.
      3. Create a quiz and add a question (any type).
      4. When authoring your quiz question, enable CKEditor in the question text and embed the image from Resources using the Browse Server option.
      5. Save the question, then go back to the main page of Tests & Quizzes and Export the quiz. Save it as a ZIP file.
      6. Import the quiz back into the site.
      7. Edit the newly imported copy of the quiz and copy the image URL for your embedded image to your clipboard.
      8. Edit the question and delete the embedded image from it, then save it with no image embed.
      9. Go to Resources and delete your image.
      10. Log out of Sakai, then log in as student.
      11. Paste the URL of the image and find that it is still present and accessible, which the instructor would likely not expect since they deleted the image both within the quiz and Resources.
      Show
      Steps to reproduce for Email Archive Make sure the ability to both receive and send email is enabled in the server. Create a site with Email Archive added. Create a user account for yourself with your email address from which to send. Create another user account where you add a different valid email address, such that you will be able to receive the email you send. Add your first user account (email sender) as an owner/instructor in your site. Add your second user (email recipient) as a member in your site. Send an email with a file attachment to the email archive. Make sure your recipient email address got the email. As site owner/instructor, go to Email Archive and delete the email. Log out of Sakai. Log in as the site member, access the link to the attachment from the email you received. Issue: The site member can still access the attachment. Steps to reproduce for quiz Create a site with Resources and Tests & Quizzes , and at least one student. Upload an image in Resources . Create a quiz and add a question (any type). When authoring your quiz question, enable CKEditor in the question text and embed the image from Resources using the Browse Server option. Save the question, then go back to the main page of Tests & Quizzes and Export the quiz. Save it as a ZIP file. Import the quiz back into the site. Edit the newly imported copy of the quiz and copy the image URL for your embedded image to your clipboard. Edit the question and delete the embedded image from it, then save it with no image embed. Go to Resources and delete your image. Log out of Sakai, then log in as student. Paste the URL of the image and find that it is still present and accessible, which the instructor would likely not expect since they deleted the image both within the quiz and Resources.

      Description

      When a file attachment is uploaded to a tool, the attached item goes into a mysterious attachments area in the database related to the tool in question. The user who uploaded the attachment cannot access this attachments area directly. In some cases, it is also very difficult or impossible for the user to modify or delete the attachments.

      Examples of tools and actions where users have difficulty controlling their attachments (there are probably others I can't recall at the moment):

      • Email Archive - Send an email with an attachment to the site. You can't delete the attachment, even if the email is removed from the archive.
      • Tests & Quizzes - Import a zip file of a quiz with an image embedded in question text. The entire quiz must be deleted for the embedded attachments to be removed.

      Example of an issue a user experienced:

      1. An instructor attached a file to an email that she sent to her site email address.
      2. The instructor realized immediately after sending the email that the attachment was incorrect, and in fact had some information she didn't want to give to the students.
      3. Because the attachment is handled as a link to the corresponding file in Sakai, the instructor expected to be able to prevent students from accessing it. She quickly went to the Email Archive in her site and deleted the email with the affected attachment.
      4. Although the email was deleted from the archive, the file attachment still existed and students could still access it via the link in the email. In order to remove access, a Sakai developer had to delete the file from the database.

      Instructors/site owners should be able to access the attachments area for a tool or item within the tool and replace or remove the files they attached.

        Gliffy Diagrams

          Zeplin

            Attachments

              Issue Links

                Activity

                  People

                  Assignee:
                  maintenanceteam Core Team
                  Reporter:
                  rainribbon Tiffany Stull
                  Votes:
                  0 Vote for this issue
                  Watchers:
                  2 Start watching this issue

                    Dates

                    Created:
                    Updated:

                      Git Integration