mahara-contributors team mailing list archive

[Tucker MacNeill <1813947@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Possible GDPR ramifications.

Student A received a notification that (Student B) Student A's Portfolio
was updated. Student B does not own Student A's page. Is not attached to
Student A's page, is not being shared with or two student A.

Student A's Portfolio is only shared with her tutors, not fellow
students. Student B shouldn't have access (and doesn't from what I can
see) to Student A's page at all.  Let alone to setup a watchlist.  When
I logged in as Student B, there was no evidence that she had ever setup
a watchlist at all.

Marhara Version: 18.04.1testing

** Affects: mahara
     Importance: Undecided
         Status: New


** Tags: watchlist

** Attachment added: "screen capture of worrying notification"
   https://bugs.launchpad.net/bugs/1813947/+attachment/5234290/+files/notification.jpg

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1813947

Title:
  watchlist notification email about a page that is not on a watchlist

Status in Mahara:
  New

Bug description:
  Possible GDPR ramifications.

  Student A received a notification that (Student B) Student A's
  Portfolio was updated. Student B does not own Student A's page. Is not
  attached to Student A's page, is not being shared with or two student
  A.

  Student A's Portfolio is only shared with her tutors, not fellow
  students. Student B shouldn't have access (and doesn't from what I can
  see) to Student A's page at all.  Let alone to setup a watchlist.
  When I logged in as Student B, there was no evidence that she had ever
  setup a watchlist at all.

  Marhara Version: 18.04.1testing

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1813947/+subscriptions