teammates icon indicating copy to clipboard operation
teammates copied to clipboard

Instructors with custom permissions cannot reach the session results page

Open damithc opened this issue 2 years ago • 3 comments

v8.19.2, production, reported by a user

Scenario: An instructor has been given permission to view responses of a specific section only. See below for an example: image

Problem: When that instructor tries to view results of the session, the following error shows up: image

I suspect this is because the instructor doesn't have permission to see all results of the session.

damithc avatar Aug 08 '22 16:08 damithc

Admittedly, the permission-checking code at this page (both versions) is quite a mess. But just to get the record straight, this is the course-wide page?

wkurniawan07 avatar Aug 08 '22 16:08 wkurniawan07

Admittedly, the permission-checking code at this page (both versions) is quite a mess. But just to get the record straight, this is the course-wide page?

Yes, it is a course-wide results page. The course owner figured out a workaround, by setting the permissions in this way instead: image

In this case the tutor can see the results, as long as he selects the correct section here: image

damithc avatar Aug 08 '22 16:08 damithc

Lowering priority as the user found a workaround.

damithc avatar Aug 08 '22 17:08 damithc

Is anyone working on this? If not I'd like to try and fix this issue.

tau-bar avatar Aug 11 '22 15:08 tau-bar

@tau-bar Go ahead, but do keep us in the loop as @wkurniawan07 has mentioned that the checks are in this page might be messy

NicolasCwy avatar Aug 13 '22 10:08 NicolasCwy

Alright, will do

tau-bar avatar Aug 13 '22 10:08 tau-bar

@damithc Although I'm not very sure, based on the phrasing in the UI, probably the workaround is actually the correct way to set things. Looking at the page, it says "In general, this instructor can ... but in sections ... this instructor can only ...". From my interpretation, the word "only" seems to imply something more restrictive. So it's probably supposed to mean in order for the instructor to have permission A for section B, he must have permission A at both the course level and for section B, provided section B permissions are set separately. In other words, if the instructor doesn't have a permission at the course level (or so-called "in general"), any permission given at section level is useless. With that said, I'm not really sure what's the expected flow when this page was designed previously but things should be consistent here if we are making any changes so that users won't be more confused. We should also refine the whole permission setting and checking part to make it clearer some time.

fans2619 avatar Aug 15 '22 10:08 fans2619

@fans2619 You are right in that the the current behavior seems to agree with the UI. For practical purposes though, we need to support both approaches, or switch to the other approach. This is because the more common scenario is a tutor is given access to her own section only. That is, number of inaccessible sections could be a lot more than accessible sections, making the configuration very verbose. e.g., 15 sections with 15 tutors will require 225 separate access configurations. What do you think?

damithc avatar Aug 15 '22 13:08 damithc

@fans2619 @damithc Perhaps a more accurate way to phrase it would be to say "~~But~~ In sections... this instructor can only...", so that the UI would be consistent with the logic? Since as mentioned, the more common scenario is for the tutor to only be given access to their own section. However, I believe issue #11935 needs to be resolved as well before this proposed UI would entirely match the logic of the custom settings.

tau-bar avatar Aug 15 '22 14:08 tau-bar

we need to support both approaches, or switch to the other approach

I totally agree with this.

fans2619 avatar Aug 15 '22 15:08 fans2619

@fans2619 @damithc Perhaps a more accurate way to phrase it would be to say "~But~ In sections... this instructor can only...", so that the UI would be consistent with the logic?

Yup. Perhaps remove only as well.

damithc avatar Aug 15 '22 15:08 damithc

I have updated the UI in the PR.

tau-bar avatar Aug 16 '22 01:08 tau-bar