We're updating the issue view to help you get more done. 

Non-logged in users can see recordings in Engage for which the public has not been granted access privileges

Steps to reproduce

Steps to reproduce:
1. Create series restricted to superadmin (i.e. make sure no privileges are checked),
2. Upload a recording with that series \
3. Logout, and without logging back in go to /engage/ui/index.html

Repeat the above with series restricted to users (i.e. assign view permissions only to role ROLE_USER), and with a series restricted to those in a specific series (e.g SERIES_1_STUDENT, SERIES_1_INSTRUCTOR, SERIES_1_ADMIN)

Actual Results:
In all cases, the public can see all the recordings

Expected Results:
In all these cases, the public shouldn't be able to see the recordings

Workaround (if any):

Status

Assignee

Rüdiger Rolf

Reporter

Judy Stern

Severity

Non Functioning

Tags (folksonomy)

None

Components

Fix versions

Affects versions

1.3

Priority

Blocker