MantisBT - ATutor
View Issue Details
0005006ATutorModulespublic2012-06-28 09:492012-08-31 17:48
greg 
cindy 
normalminorhave not tried
closedfixed 
 
2.1 
SVN
f15ebc30030e639a21132775ab718d1db715af27
0005006: things current group files
It was reported that file submitted to File Storage through groups, are visible in Things Current by all students in a course. Students should only see files from groups they are members of.
No tags attached.
Issue History
2012-06-28 09:49gregNew Issue
2012-07-10 13:19gregNote Added: 0005626
2012-07-10 13:19gregAssigned To => cindy
2012-07-10 13:19gregStatusnew => assigned
2012-07-27 08:41cindySVN Revision# => f15ebc30030e639a21132775ab718d1db715af27
2012-07-27 08:41cindyNote Added: 0005790
2012-07-27 08:41cindyStatusassigned => resolved
2012-07-27 08:41cindyFixed in Version => 2.1
2012-07-27 08:41cindyResolutionopen => fixed
2012-08-31 17:48gregNote Added: 0005822
2012-08-31 17:48gregStatusresolved => closed

Notes
(0005626)
greg   
2012-07-10 13:19   
Same problem occurs in sublinks.php for the file storage module. The query does not check if the user is a member of the group the file was submitted to.
(0005790)
cindy   
2012-07-27 08:41   
Solution: Check whether the current login user is in the group that the file uploaded via "file storage" belongs to.

Affected: mods/_standard/file_storage/module_news.php
(0005822)
greg   
2012-08-31 17:48   
closed in ATutor 2.1