Groups access control - Revision history

Mudrd8mz: Text replacement - "" to ""

2021-07-14T13:09:53Z

Text replacement - "</code>" to "</syntaxhighlight>"

← Older revision		Revision as of 13:09, 14 July 2021
Line 11:		Line 11:

	==Groups at course level==		==Groups at course level==
	Groups at course level are defined relatively vaguely, each area may use different logic. <syntaxhighlight lang="php">groups_print_course_menu()</~~code~~> and <syntaxhighlight lang="php">groups_get_course_group()</~~code~~> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups).		Groups at course level are defined relatively vaguely, each area may use different logic. <syntaxhighlight lang="php">groups_print_course_menu()</syntaxhighlight> and <syntaxhighlight lang="php">groups_get_course_group()</syntaxhighlight> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups).

	Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests.		Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests.

Mudrd8mz: Text replacement - "`" to ""`


2021-07-14T13:05:01Z
Text replacement - "<code>" to "<syntaxhighlight lang="php">"

				
				
				
				
				
				← Older revision
				Revision as of 13:05, 14 July 2021
				
Line 11:
Line 11:



==Groups at course level== ==Groups at course level==
Groups at course level are defined relatively vaguely, each area may use different logic. <code>groups_print_course_menu()</code> and <code>groups_get_course_group()</code> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups). Groups at course level are defined relatively vaguely, each area may use different logic. <syntaxhighlight lang="php">groups_print_course_menu()</code> and <syntaxhighlight lang="php">groups_get_course_group()</code> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups).



Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests. Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests.



Nadavkav: /* Common problems */
2015-06-27T15:35:38Z
Common problems

				
				
				
				
				
				← Older revision
				Revision as of 15:35, 27 June 2015
				
Line 77:
Line 77:
# tags may not be group aware # tags may not be group aware
# notes may not be group aware # notes may not be group aware
# experimental groupmembersonly feature is not related to groupings at all! # experimental groupmembersonly feature is not related to groupings at all! (not used anymore, since Moodle 2.9)



Abgreeve: /* mod_forum */
2012-01-12T01:16:48Z
mod_forum

				
				
				
				
				
				← Older revision
				Revision as of 01:16, 12 January 2012
				
Line 38:
Line 38:
===mod_forum=== ===mod_forum===



Each forum discussion has a group flag. 0 means all users may see discussion, in separate mode only users with access all groups may post in discussion with group 0. Non-standard -1 means group means groups not used. Number indicates group id. Each forum discussion has a group flag. 0 means all users may see a discussion, in separate mode only users with access all groups may post in a discussion with group 0. Non-standard -1 means that groups are not used. Number indicates a group id.



In SEPARATEGROUPS mode users may view discussion for member groups or 0, ordinary users may post only in member groups only, access all groups capability is required to post in discussions for all groups (discussion group == 0). In separate groups mode forum prints a warning if user is not member of any group and does not have access to all groups. In SEPARATEGROUPS mode users may view discussions for member groups or 0, ordinary users may post only in member groups only, access all groups capability is required to post in discussions for all groups (discussion group == 0). In separate groups mode the forum prints a warning if the user is not a member of any group and does not have access to all groups.



In VISIBLEGROUPS mode users may see posts in all groups but may post only in member groups unless they have access all groups capability. In VISIBLEGROUPS mode users may see posts in all groups but may only post in the member groups unless they have access all groups capability.



Forum prints group membership icons next to each user post no matter what group mode is selected, the only way to prevent this group membership disclosure is to select grouping without groups in the forum settings page. User loose access to own discussions if they are removed from separate group, all users may still see their posts in original group because the discussion group flag is used for access control. The forum prints group membership icons next to each user post no matter what group mode is selected, the only way to prevent this group membership disclosure is to select grouping without groups in the forum settings page. User lose access to their own discussions if they are removed from separate group, all users may still see their posts in original group because the discussion group flag is used for access control.



Forum code may not work well if you delete already used groups or change grouping. Forum code may not work well if you delete already used groups or change grouping.



Abgreeve: /* Groups at course level */
2012-01-12T01:07:50Z
Groups at course level

				
				
				
				
				
				← Older revision
				Revision as of 01:07, 12 January 2012
				
Line 11:
Line 11:



==Groups at course level== ==Groups at course level==
Groups at course level are defined relatively vaguely, each area my use different logic. <code>groups_print_course_menu()</code> and <code>groups_get_course_group()</code> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups). Groups at course level are defined relatively vaguely, each area may use different logic. <code>groups_print_course_menu()</code> and <code>groups_get_course_group()</code> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups).



Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests. Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests.



Skodak: /* mod_quiz */
2011-04-14T20:25:43Z
mod_quiz

				
				
				
				
				
				← Older revision
				Revision as of 20:25, 14 April 2011
				
Line 68:
Line 68:
===mod_quiz=== ===mod_quiz===



TODO: add more information



==Common problems== ==Common problems==





Skodak: /* mod_assignment */
2011-04-14T20:24:53Z
mod_assignment

				
				
				
				
				
				← Older revision
				Revision as of 20:24, 14 April 2011
				
Line 59:
Line 59:



===mod_assignment=== ===mod_assignment===

The group mode handling is similar to gradebook, the difference is that current gradebook reports work with capabilities in course context only, the assignment module verifies capabilities in module context.

Group membership and restrictions is calculated on the fly, there is no group flag in submissions.

In separate mode all teachers may grade/view submissions of any user. In separate mode teachers may grade/view own group only, access all groups allows them to view/grade everybody.



===mod_quiz=== ===mod_quiz===



Skodak: /* mod_data */
2011-04-14T19:12:19Z
mod_data

				
				
				
				
				
				← Older revision
				Revision as of 19:12, 14 April 2011
				
Line 50:
Line 50:
===mod_data=== ===mod_data===



Database activity is similar to forum implementation. Database activity is similar to forum implementation, it may be a bit less complex though.



===mod_wiki=== ===mod_wiki===





Skodak: /* mod_forum */
2011-04-14T19:11:26Z
mod_forum

				
				
				
				
				
				← Older revision
				Revision as of 19:11, 14 April 2011
				
Line 44:
Line 44:
In VISIBLEGROUPS mode users may see posts in all groups but may post only in member groups unless they have access all groups capability. In VISIBLEGROUPS mode users may see posts in all groups but may post only in member groups unless they have access all groups capability.



Forum prints group membership icons next to each user post no matter what group mode is selected, the only way to prevent this group membership disclosure is to select grouping without groups in the forum settings page. Forum prints group membership icons next to each user post no matter what group mode is selected, the only way to prevent this group membership disclosure is to select grouping without groups in the forum settings page. User loose access to own discussions if they are removed from separate group, all users may still see their posts in original group because the discussion group flag is used for access control.
 
Forum code may not work well if you delete already used groups or change grouping.



===mod_data=== ===mod_data===



Skodak: /* mod_data */
2011-04-14T19:08:41Z
mod_data

				
				
				
				
				
				← Older revision
				Revision as of 19:08, 14 April 2011
				
Line 48:
Line 48:
===mod_data=== ===mod_data===



Database activity is similar to forums implementation. Database activity is similar to forum implementation.



===mod_wiki=== ===mod_wiki===

← Older revision		Revision as of 13:05, 14 July 2021
Line 11:		Line 11:

	==Groups at course level==		==Groups at course level==
	Groups at course level are defined relatively vaguely, each area may use different logic. <~~code~~>groups_print_course_menu()</code> and <~~code~~>groups_get_course_group()</code> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups).		Groups at course level are defined relatively vaguely, each area may use different logic. <syntaxhighlight lang="php">groups_print_course_menu()</code> and <syntaxhighlight lang="php">groups_get_course_group()</code> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups).

	Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests.		Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests.

← Older revision		Revision as of 15:35, 27 June 2015
Line 77:		Line 77:
	# tags may not be group aware		# tags may not be group aware
	# notes may not be group aware		# notes may not be group aware
	# experimental groupmembersonly feature is not related to groupings at all!		# experimental groupmembersonly feature is not related to groupings at all! (not used anymore, since Moodle 2.9)

← Older revision		Revision as of 01:16, 12 January 2012
Line 38:		Line 38:
	===mod_forum===		===mod_forum===

	Each forum discussion has a group flag. 0 means all users may see discussion, in separate mode only users with access all groups may post in discussion with group 0. Non-standard -1 means ~~group means~~ groups not used. Number indicates group id.		Each forum discussion has a group flag. 0 means all users may see a discussion, in separate mode only users with access all groups may post in a discussion with group 0. Non-standard -1 means that groups are not used. Number indicates a group id.

	In SEPARATEGROUPS mode users may view ~~discussion~~ for member groups or 0, ordinary users may post only in member groups only, access all groups capability is required to post in discussions for all groups (discussion group == 0). In separate groups mode forum prints a warning if user is not member of any group and does not have access to all groups.		In SEPARATEGROUPS mode users may view discussions for member groups or 0, ordinary users may post only in member groups only, access all groups capability is required to post in discussions for all groups (discussion group == 0). In separate groups mode the forum prints a warning if the user is not a member of any group and does not have access to all groups.

	In VISIBLEGROUPS mode users may see posts in all groups but may post ~~only~~ in member groups unless they have access all groups capability.		In VISIBLEGROUPS mode users may see posts in all groups but may only post in the member groups unless they have access all groups capability.

	~~Forum~~ prints group membership icons next to each user post no matter what group mode is selected, the only way to prevent this group membership disclosure is to select grouping without groups in the forum settings page. User ~~loose~~ access to own discussions if they are removed from separate group, all users may still see their posts in original group because the discussion group flag is used for access control.		The forum prints group membership icons next to each user post no matter what group mode is selected, the only way to prevent this group membership disclosure is to select grouping without groups in the forum settings page. User lose access to their own discussions if they are removed from separate group, all users may still see their posts in original group because the discussion group flag is used for access control.

	Forum code may not work well if you delete already used groups or change grouping.		Forum code may not work well if you delete already used groups or change grouping.

← Older revision		Revision as of 01:07, 12 January 2012
Line 11:		Line 11:

	==Groups at course level==		==Groups at course level==
	Groups at course level are defined relatively vaguely, each area my use different logic. <code>groups_print_course_menu()</code> and <code>groups_get_course_group()</code> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups).		Groups at course level are defined relatively vaguely, each area may use different logic. <code>groups_print_course_menu()</code> and <code>groups_get_course_group()</code> is used to obtain/change current group. Developers have to pay extra attention to 0 returned from groups_get_course_group() in SEPARATEGROUPS mode. Pages/code that does not use current user group from groups_get_course_group() (i.e.. accept group parameter from url) must verify the group parameter is valid (i.e.. in SEPARATEGROUPS mode user is member of that group or has access to all groups).

	Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests.		Groups should not be used to mark users with special needs or disabilities because the group membership is not treated as private information and may be accidentally displayed to other users in course or even guests.

← Older revision		Revision as of 20:25, 14 April 2011
Line 68:		Line 68:
	===mod_quiz===		===mod_quiz===

			TODO: add more information

	==Common problems==		==Common problems==

← Older revision		Revision as of 20:24, 14 April 2011
Line 59:		Line 59:

	===mod_assignment===		===mod_assignment===

			The group mode handling is similar to gradebook, the difference is that current gradebook reports work with capabilities in course context only, the assignment module verifies capabilities in module context.

			Group membership and restrictions is calculated on the fly, there is no group flag in submissions.

			In separate mode all teachers may grade/view submissions of any user. In separate mode teachers may grade/view own group only, access all groups allows them to view/grade everybody.

	===mod_quiz===		===mod_quiz===

← Older revision		Revision as of 19:12, 14 April 2011
Line 50:		Line 50:
	===mod_data===		===mod_data===

	Database activity is similar to forum implementation.		Database activity is similar to forum implementation, it may be a bit less complex though.

	===mod_wiki===		===mod_wiki===

← Older revision		Revision as of 19:11, 14 April 2011
Line 44:		Line 44:
	In VISIBLEGROUPS mode users may see posts in all groups but may post only in member groups unless they have access all groups capability.		In VISIBLEGROUPS mode users may see posts in all groups but may post only in member groups unless they have access all groups capability.

	Forum prints group membership icons next to each user post no matter what group mode is selected, the only way to prevent this group membership disclosure is to select grouping without groups in the forum settings page.		Forum prints group membership icons next to each user post no matter what group mode is selected, the only way to prevent this group membership disclosure is to select grouping without groups in the forum settings page. User loose access to own discussions if they are removed from separate group, all users may still see their posts in original group because the discussion group flag is used for access control.

			Forum code may not work well if you delete already used groups or change grouping.

	===mod_data===		===mod_data===

← Older revision		Revision as of 19:08, 14 April 2011
Line 48:		Line 48:
	===mod_data===		===mod_data===

	Database activity is similar to ~~forums~~ implementation.		Database activity is similar to forum implementation.

	===mod_wiki===		===mod_wiki===