General help

Security keys, what are they? Do I need them?

 
 
Picture of faruq f
Security keys, what are they? Do I need them?
 

Users I've set up in Moodle 2, have in their navigation

Settings > My profile settings>security keys

can I remove this, do I want to remove this? Is it useful?

 
Average of ratings: -
Picture of Claire Browne
Re: Security keys, what are they? Do I need them?
 

Hello,

In the Moodle student roles have you defined the student having yes to moodle/webservice:createtoken capability?

If so move this dot to prohbit or prevent.

 
Average of ratings: -
me
Re: Security keys, what are they? Do I need them?
 

in my seetings "allow" is not ticked and yet my students still see the "security keys" with the token link in navigation.

 

 
Average of ratings: -
me
Re: Security keys, what are they? Do I need them?
 

Anyone?

 
Average of ratings: -
Me reading and researching :)
Re: Security keys, what are they? Do I need them?
 

I wanted to answer: also check the settings for Authenticated User.

But i've just done that in my Moodle 2.0.3 installation, and I find that it's set to 'Not set'.

So: it is indeed an interesting question: which setting do you have to turn off to remove this option from student's Settingsmenu?

 
Average of ratings: -
Picture of Helen Foster
Re: Security keys, what are they? Do I need them?
Group DevelopersGroup Documentation writersGroup Moodle HQGroup Particularly helpful MoodlersGroup Testers

It seems that security keys are used for secure RSS feeds as well as for web services. However unfortunately I don't know any more than that! Hopefully someone knowledgeable will reply to this thread and explain all and/or update the documentation Security keys.

 
Average of ratings: -
Dan at desk in Moodle HQ, Perth
Re: Security keys, what are they? Do I need them?
Group DevelopersGroup Moodle Course Creator Certificate holdersGroup Moodle HQGroup Particularly helpful MoodlersGroup Testers
Hi Keith,

Apologies as this is quite a technical answer..

It appears that page has mixed uses - one is for web services (controlled by the capability suggested above). The other is for 'secure RSS feeds', which I suspect is why you can see this (it is displayed when RSS feeds are enabled).

Secure RSS feeds is a feature added to Moodle 2.0 which allows users to have a RSS feed with a 'secret url'. It was developed by a summer of code student and the project was discussed in this thread. The idea is that the URL is not guessable and can be used as a primitive way of ensuring only the person who's URL it is can access the feed. (The reason to do this rather than ask for a usernames and password is because many RSS readers such as google reader do not support using a username and password to access RSS feeds).

This token which you are seeing is a 'secret' token (thinks of it as a password for the RSS feed) which can be used to access the private RSS feeds. It is displayed here in order to allow you to rest the token (or 'password') if you believe someone may have found your secure RSS feed url for example.

It appears as though there is not a capability to disable access to this page, although it will not be displayed if RSS feeds are disabled.

thanks,
dan
 
Average of ratings:Useful (2)
Me reading and researching :)
Re: Security keys, what are they? Do I need them?
 

Hi Dan,

Thanks for the information and clarification! Even though it is technical wink

You write: 'It appears as though there is not a capability to disable access to this page, although it will not be displayed if RSS feeds are disabled.'Indeed, when i disable RSS-feeds from Site admin > advanced (Moodle 2.0), the link to the keys disappears.

But I don't want to disable RSS, because we use a 'school news' rss-feed for all students on the My Moodle page. Disabling RSS also hides this block.

Do you think it might help if I request, via tracker, that some way be added to Moodle (a capability or so), that one can hide the link from Authenticated Users / Students?

 
Average of ratings: -
Dan at desk in Moodle HQ, Perth
Re: Security keys, what are they? Do I need them?
Group DevelopersGroup Moodle Course Creator Certificate holdersGroup Moodle HQGroup Particularly helpful MoodlersGroup Testers
Hi Sytske,

Certainly - if you put the component to RSS then I am the RSS component maintainer and will be assigned this issue.

cheers,
dan
 
Average of ratings: -
Me reading and researching :)
Re: Security keys, what are they? Do I need them?
 

Okay, thanks. I'll have a look at the tracker!

 
Average of ratings: -
Picture of Alan Hare
Re: Security keys, what are they? Do I need them?
 

Was this ever assigned to a tracker?

 
Average of ratings: -
Picture of Sophie Ricci
Re: Security keys, what are they? Do I need them?
 

Hi,

Since then, is this capability been added ? I use moodle 2.5.2

Thanks.

 
Average of ratings: -