-
Bug
-
Resolution: Unresolved
-
Minor
-
None
-
4.1.3
-
None
-
MOODLE_401_STABLE
Hello,
There is a bug that category manager can view other participant information even if he/she/they are on a course as student in different category.
Tested on Moodle 4.1.3
Steps to repeat:
0. Check that student-role has moodle/user:viewdetails set to "not set"
1. Create a course to category1
2. Create a forum-activity on this course and post something as user0.
3. Assign manager permissions to user1 in category2
4. Check that user1 doesn't have any other permissions than manager in category2.
5. Add user1 to a course under category1 as a student
5. Open the forum and click user0s name in the message -> profile information opens even though manager is on a student and student-role has moodle/user:viewdetails "not set" on system level