mahara-contributors team mailing list archive

[Tucker MacNeill <1813947@xxxxxxxxxxxxxxxxxx>]

Lecturer Q made a '[Template] Personal and Professional Development'
page, which Student A and Student B both copied from. Lecturer Q
retained access to copied templates. Students then shared their copied
pages also with Tutor Group comprised of other tutors in the programme,
so that they also had access to on-going portfolio development.

So, yes, both titles of the pages were similar, as the students were
told to replace '[Template]' with their own names.

I called this a 'watchlist' bug, because neither student, nor the
lecturer in question set up watchlists at all.

Neither Student A nor Student B had access to each other's pages, in
order to even setup a watchlist in the first place.  Therefore a
'watchlist notification' is pretty strange.

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1813947

Title:
  watchlist notification email about a page that is not on a watchlist

Status in Mahara:
  Incomplete

Bug description:
  Possible GDPR ramifications.

  Student A received a notification that (Student B) Student A's
  Portfolio was updated. Student B does not own Student A's page. Is not
  attached to Student A's page, is not being shared with or two student
  A.

  Student A's Portfolio is only shared with her tutors, not fellow
  students. Student B shouldn't have access (and doesn't from what I can
  see) to Student A's page at all.  Let alone to setup a watchlist.
  When I logged in as Student B, there was no evidence that she had ever
  setup a watchlist at all.

  Marhara Version: 18.04.1testing

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1813947/+subscriptions