Bug #5212

Course catalog allows people access to unassign courses

Added by Eric Petitdemange about 9 years ago. Updated about 9 years ago.

Feature implemented
Target version:
Start date:
Due date:
% Done:


Estimated time:
Spent time:
SCRUM pts - complexity:


Issue : I can access to courses that are in the catalog regardless I'm registered in this course or not.
z//z is only registered to QRM Global, going to "My courses" only sees it, going through course catalog (from main page) sees a lot of courses, can access or sometimes register (I think I however don't see all the courses



Updated by Marko Kastelic about 9 years ago

can you check the status of the course :
  • world open : anyone can access the course
  • open for platform user : any platform user can access the course
  • private : only course members can access the course (and owner/teacher, and hrm(if set to course), and admin)
  • closed: only owner, admin (and maybe hrm) can access the course

as for nr. of courses on the list : i think the number is limited to 10 (each category). For more: you can use search, categories, ...


Updated by Eric Petitdemange about 9 years ago

Well that's the point, I made a test using Open - access allowed for users registered on the platform.
I didn't register the user in this course, and, if the user doesn't have acces to the catalog or/and the hottest course displayed, no problem, He doesn't have access.

But, if the user still not register to this particular course, does have course catalog access or hottest course visibility, He then can just click on the course to access it.

I did try to set as private just in case, and this typically was the overcome, you just have to see the catalog and click on the link.

That's why I thought it might be a security issue.


Updated by Eric Petitdemange about 9 years ago

OK, it seems OK, the trainee can however vote on the course but doesn't have anymore access to it in pivate mode....
I'm using nightly 19.17


Updated by Yannick Warnier about 9 years ago

  • Status changed from New to Assigned
  • Assignee set to Julio Montoya
  • Target version set to 1.9 RC1

Updated by Julio Montoya about 9 years ago

  • Status changed from Assigned to Needs more info
  • Assignee deleted (Julio Montoya)

well that's a good question who can vote for the courses? I think voting should be available for every registered user (not anonymous). Otherwise I'm gonna add a lot of validations for admin, teachers, students, drh. what do you think?


Updated by Eric Petitdemange about 9 years ago

  • Status changed from Needs more info to Feature implemented

Agreed, as the vote doesn't have much impact on the course quality, it's just an indicator on how trainee like the course.
For deeper info, we may use surveys...
I therefor close the case as it's considered as a "normal behavior" :)

Thanks !

Also available in: Atom PDF