mahara-contributors team mailing list archive

[François Marier <francois@xxxxxxxxxx>]

When a view is marked as objectionable, a new type of access record will
be added to the view. Admins will then be able to access the view as if
the user had given them access.

When an admin accesses a view through this type of access, there will be
a button above the view that says something like "This view is not
objectionable material" and that will simply take away the view access
for admins.

-- 
Admin cannot check objectionable content notifications for views they have no access to.
https://bugs.launchpad.net/bugs/522361
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: Confirmed

Bug description:
Admins who receive an objectionable content notification might not be on the access list for the view that's reported, so they get an 'access denied' message.

They could look at the view by logging in as the view owner, but they have no way to find out who the owner is when all they have is the view id.

A quick fix might be to change the objectionable content notification so it doesn't link to the view itself, but to a page in the admin section with information about the view owner and instructions to log in as the user to see the view.

A better option might be to create a secret url token for the view (you can make these invisible to the view owner) and use the secret url in the link from the new admin screen (or directly from the notification).