questbank permission bug?

[maruggio]

Hi

I am in FormaLMS 2.3 running a quest bank, I set all r/w permission correct for all types of user except ghost/guest. Login as student I am able to access the quest bank, but if I want to add a question as student. As teacher and mentor everything is working fine.

Then I wil be switched to follwing page:

Code: Select all

https://URL/appLms/index.php?modname=quest_bank&op=addquest

wit the th result on page

Code: Select all

You can't access/lms/course/private/12/storage/view

.

In Logs no error is shown.

Code: Select all

IPADDR - - [28/Aug/2019:13:56:22 +0200] "POST /appLms/index.php?modname=quest_bank&op=addquest HTTP/1.1" 200 372 "https://URL/appLms/index.php modname=quest_bank&op=main&id_module_sel=40&id_main_sel=139" "BROWSER INFO"

-oliver

[max]

Take a look at the menu assigned to this course and at the permissions. Reassign it. Then try again.
I think this has more to do with cache, when you login and out as a student, then teacher, then student.
It's better to use separate browsers.

[maruggio]

No chance. I tested it with 3 browser on 2 devices in 2 subnets. I deleted caches in browser, caches in firewall et al.

[max]

I am on holiday now so I cannot check better. That issue to me looked like it was due to menu permissions. But I cannot add much now.

[alfa24]

The function addquest in quest_bank module will be checking whether the user has view permission for storage module.
Don't know exactly why, and I have no time to investigate.
Anyway, you have two options:
1) comment out checkPerm('view', false, 'storage'); line in /appLms/modules/quest_bank/quest_bank.php
2) give your student view permission to storage module