Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-44037

Announcements: Access setting doesn't work correctly if the site is open to all users/logged in users

    XMLWordPrintable

    Details

    • Test Plan:
      Hide
      1. As an instructor, click Worksite setup and create a course site with an existing roster and a description.
      2. Add the Announcement tool to this site.
      3. In Site Access part, select "Publish Site" for Site Status under Site Access, select Anyone (including non-logged in), and keep other settings unchanged.
      4. Publish the site and open the Announcement tool in the new site.
      5. Add an announcement. Under Access part, choose "Only members of this site can see this announcement."
      6. Publish the announcement. 
      7. Copy the link of the course in the Site Info tool. Log out of the current account and log in again as a user who is not a member of the newly created site.
      8. Paste the link into the browser and open the Announcement tool.

      Expected Behavior: The user will not be able to see the newly created announcement.

      Current Behavior: The user will be able to see and open the newly created announcement.

      Show
      As an instructor, click Worksite setup and create a course site with an existing roster and a description. Add the Announcement tool to this site. In Site Access part, select "Publish Site" for Site Status under Site Access, select Anyone (including non-logged in), and keep other settings unchanged. Publish the site and open the Announcement tool in the new site. Add an announcement. Under Access part, choose "Only members of this site can see this announcement." Publish the announcement.  Copy the link of the course in the Site Info tool. Log out of the current account and log in again as a user who is not a member of the newly created site. Paste the link into the browser and open the Announcement tool. Expected Behavior: The user will not be able to see the newly created announcement. Current Behavior : The user will be able to see and open the newly created announcement.

      Description

      If a course site is set to be open to any user (including non-logged-in users) or to all logged-in users when it is created, the access setting of an announcement in Announcements tool will not work correctly: if the access setting of an announcement is "only members of this site can see this announcement," a user who is not a member of this site can still open the course site and open this specific announcement.

      One possible reason is that when an announcement judges whether a user has the access to it, the judgment is currently based on whether the user can open the course site instead of whether the user is on the course roster.

        Gliffy Diagrams

          Zeplin

            Attachments

              Activity

                People

                Assignee:
                maintenanceteam Core Team
                Reporter:
                fyin2 Fangcong Yin
                Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                  Dates

                  Created:
                  Updated:

                    Git Integration