** Changed in: mahara/1.10
    Milestone: 1.10.5 => 1.10.6

** Changed in: mahara/1.9
    Milestone: 1.9.7 => 1.9.8

** Changed in: mahara/15.04
    Milestone: 15.04.2 => 15.04.3

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask 
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1394082

Title:
  Can create a URL that takes you to a different page depending on
  whether you're logged in to MNet or not.

Status in Mahara ePortfolio:
  Confirmed
Status in Mahara 1.10 series:
  Confirmed
Status in Mahara 1.8 series:
  Won't Fix
Status in Mahara 1.9 series:
  Confirmed
Status in Mahara 15.04 series:
  Confirmed
Status in Mahara 15.10 series:
  Confirmed

Bug description:
  As reported on the mahara.org forum:
  https://mahara.org/interaction/forum/topic.php?id=6549

  To replicate:

  1. Set up a Moodle instance with the Mahara assignment submission
  plugin and connect it up to your Mahara instance.

  2. Create a view with ID 1000.

  3. Create another view with ID 1001.

  4. Make both these pages accessible to the public.

  5. Set up an Mahara assignment in Moodle.

  6. Submit the view with ID 1000 to Moodle as an assignment submission.

  7. Note the access URL that gets generated, which will contain an MNet
  access token, i.e. /view/view.php?mt=abcd1234

  8. Add the ID of page 1001 to this URL:
  /view/view.php?id=1001&mt=abcd1234

  Expected Result: This URL should either display page 1000 every time,
  or an "access denied" message

  Actual Result: If you're logged in to Mahara via MNet, you see page
  1000. If you're not, you see page 1001.

  
  The cause of this problem, is that /view/view.php completely ignores the 
"mt=" tag if you're not logged in via MNet. In which case, if an ID is also 
supplied, it falls back to that.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1394082/+subscriptions

_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to     : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp

Reply via email to