If you go to the manage questions page for a Quiz, you will notice that every question added to the quiz has an Edit link. However, in some situations, the user might not actually have edit permissions for the given question, and the module does not check first this level of access before displaying the link. This leads to lots of frustrated teachers hitting access denied pages when trying to edit questions they shouldn't be able to edit at all.

One example scenario of this is a site (like ours) that limits users to only be able to edit their own questions while still being able to use other users questions in their quizzes.

I have attached a patch that adds an access check before displaying the Edit link on this page.

Comments

sivaji_ganesh_jojodae’s picture

Status: Needs review » Fixed

Fixed in commit 03328c5..6000243. Thanks for reporting this issue.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

  • Commit 6000243 on 7.x-4.x, 7.x-5.x by sivaji:
    Issue #1984708 by michaelk: Fixed Manage Questions Edit Link Doesn't...

  • Commit 6000243 on 7.x-4.x, 7.x-5.x, quiz-pages by sivaji:
    Issue #1984708 by michaelk: Fixed Manage Questions Edit Link Doesn't...

  • Commit 6000243 on 7.x-4.x, 7.x-5.x, quiz-pages, 2269219 by sivaji:
    Issue #1984708 by michaelk: Fixed Manage Questions Edit Link Doesn't...

  • Commit 6000243 on 7.x-4.x, 7.x-5.x, 2269219 by sivaji:
    Issue #1984708 by michaelk: Fixed Manage Questions Edit Link Doesn't...