Uploaded image for project: 'Opencast'
  1. MH-8527

Non-logged in users can see recordings in Engage for which the public has not been granted access privileges

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Blocker
    • Resolution: Fixed and reviewed
    • Affects versions: 1.3
    • Fix versions: 1.3
    • Components: Engage User Interface
    • Labels:
      None
    • Severity:
      Non Functioning
    • Steps to reproduce:
      Hide
      Steps to reproduce:
      1. Create series restricted to superadmin (i.e. make sure no privileges are checked),
      2. Upload a recording with that series \
      3. Logout, and without logging back in go to /engage/ui/index.html

      Repeat the above with series restricted to users (i.e. assign view permissions only to role ROLE_USER), and with a series restricted to those in a specific series (e.g SERIES_1_STUDENT, SERIES_1_INSTRUCTOR, SERIES_1_ADMIN)
       
       Actual Results:
       In all cases, the public can see all the recordings
       
       Expected Results:
       In all these cases, the public shouldn't be able to see the recordings
       
       Workaround (if any):
       





      Show
      Steps to reproduce: 1. Create series restricted to superadmin (i.e. make sure no privileges are checked), 2. Upload a recording with that series \ 3. Logout, and without logging back in go to /engage/ui/index.html Repeat the above with series restricted to users (i.e. assign view permissions only to role ROLE_USER), and with a series restricted to those in a specific series (e.g SERIES_1_STUDENT, SERIES_1_INSTRUCTOR, SERIES_1_ADMIN)    Actual Results:  In all cases, the public can see all the recordings    Expected Results:  In all these cases, the public shouldn't be able to see the recordings    Workaround (if any):  

      TestRail: Results

        Attachments

          Issue links

            Activity

              People

              • Assignee:
                rrolf RĂ¼diger Rolf
                Reporter:
                judy Judy Stern
              • Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  TestRail: Cases