-
Bug
-
Resolution: Fixed
-
Minor
-
3.9
-
MOODLE_39_STABLE
-
MOODLE_39_STABLE
-
The privacy provider for quizaccess_seb looks course modules with just the instance matching the quiz id - it doesnt make sure that the instance actually belongs to a quiz however - polluting the results with non-quizzes.
Example quizaccess_seb privacy query:
// SEB quiz settings. |
$sql = "SELECT qs.id as id,
|
qs.quizid as quizid,
|
qs.usermodified as usermodified,
|
qs.timecreated as timecreated,
|
qs.timemodified as timemodified
|
FROM {quizaccess_seb_quizsettings} qs
|
JOIN {course_modules} cm ON cm.instance = qs.quizid
|
And a similar query used by quizreport_group privacy:
$sql = "SELECT c.id
|
FROM {context} c
|
JOIN {course_modules} cm ON cm.id = c.instanceid AND c.contextlevel = :contextlevel
|
JOIN {modules} m ON m.id = cm.module AND m.name = :modname
|
JOIN {quiz_group_attempts} qga ON qga.quizid = cm.instance
|
JOIN {user} u ON u.id = qga.userid
|
WHERE u.id = :userid";
|
Note that a JOIN is performed onto the modules table to ensure we limit course_modules to quizzes.
- Discovered while testing
-
MDL-67850 Add Safe Exam Browser integration to the standard Moodle package (moodle-quizaccess_seb)
-
- Closed
-
