** Changed in: mahara/1.9
Status: Confirmed => Won't Fix
** Changed in: mahara/1.9
Milestone: 1.9.9 => None
** No longer affects: mahara/1.8
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1394082
Title:
Can create a URL that takes you to a different page depending on
whether you're logged in to MNet or not.
Status in Mahara:
Confirmed
Status in Mahara 1.10 series:
Confirmed
Status in Mahara 1.9 series:
Won't Fix
Status in Mahara 15.04 series:
Confirmed
Status in Mahara 15.10 series:
Confirmed
Status in Mahara 16.04 series:
Confirmed
Bug description:
As reported on the mahara.org forum:
https://mahara.org/interaction/forum/topic.php?id=6549
To replicate:
1. Set up a Moodle instance with the Mahara assignment submission
plugin and connect it up to your Mahara instance.
2. Create a view with ID 1000.
3. Create another view with ID 1001.
4. Make both these pages accessible to the public.
5. Set up an Mahara assignment in Moodle.
6. Submit the view with ID 1000 to Moodle as an assignment submission.
7. Note the access URL that gets generated, which will contain an MNet
access token, i.e. /view/view.php?mt=abcd1234
8. Add the ID of page 1001 to this URL:
/view/view.php?id=1001&mt=abcd1234
Expected Result: This URL should either display page 1000 every time,
or an "access denied" message
Actual Result: If you're logged in to Mahara via MNet, you see page
1000. If you're not, you see page 1001.
The cause of this problem, is that /view/view.php completely ignores the
"mt=" tag if you're not logged in via MNet. In which case, if an ID is also
supplied, it falls back to that.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1394082/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
