mahara-contributors team mailing list archive

[François Marier <francois@xxxxxxxxxx>]

** Changed in: mahara
   Importance: Undecided => Medium

** Changed in: mahara
    Milestone: None => 1.3.0

** Changed in: mahara
       Status: New => Confirmed

-- 
Admin cannot check objectionable content notifications for views they have no access to.
https://bugs.launchpad.net/bugs/522361
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Confirmed

Bug description:
Admins who receive an objectionable content notification might not be on the access list for the view that's reported, so they get an 'access denied' message.

They could look at the view by logging in as the view owner, but they have no way to find out who the owner is when all they have is the view id.

A quick fix might be to change the objectionable content notification so it doesn't link to the view itself, but to a page in the admin section with information about the view owner and instructions to log in as the user to see the view.

A better option might be to create a secret url token for the view (you can make these invisible to the view owner) and use the secret url in the link from the new admin screen (or directly from the notification).