MSA-11-0022: Course creators could change filters at course level

MSA-11-0022: Course creators could change filters at course level

by Michael de Raadt -
Number of replies: 0
Topic: Course creator role has incorrect default permissions
Severity: Minor
Versions affected: < 2.0.4, < 2.1.1 (1.9.x not affected)
Reported by: Ray Lawrence
Issue no.: MDL-27994
Solution: Manually alter permissions in older sites to remove rights from course creators

Description:

The default permission for course creators allowed them to alter course filters, which was an issue for users with mixed roles.