If you go to the manage questions page for a Quiz, you will notice that every question added to the quiz has an Edit link. However, in some situations, the user might not actually have edit permissions for the given question, and the module does not check first this level of access before displaying the link. This leads to lots of frustrated teachers hitting access denied pages when trying to edit questions they shouldn't be able to edit at all.
One example scenario of this is a site (like ours) that limits users to only be able to edit their own questions while still being able to use other users questions in their quizzes.
I have attached a patch that adds an access check before displaying the Edit link on this page.
| Comment | File | Size | Author |
|---|---|---|---|
| 0001-Fix-issue-where-edit-link-is-displayed-even-though-t.patch | 2.78 KB | michaelk |
Comments
Comment #1
sivaji_ganesh_jojodae commentedFixed in commit 03328c5..6000243. Thanks for reporting this issue.