Security and privacy

 
 
Wazza
Students can see hidden resources
 

We are having a big problem. I thought I must be overlooking something, but I have been triple checking everything.

We are using Moodle 2.3.2 (Build: 20120910)

Our students can see hidden resources.

Teacherview:

Notice the grey eye and the grey text. However, students view looks like this:

We can't seem to be able to get the hidden resources actually hidden for students. 

We did not mess with roles. Actually I tried, just to rule out problems, removing the student from the course and reassign the student to the course. I made sure the student has a student role. I alos checked permissions for the student role.

I'm stuck. The answer to teachers' tests are now visible for many students. Big problems.

 
Average of ratings: -
Wazza
Re: Students can see hidden resources
 

Small update: sections of courses can be set invisible, however single resources can not be set invisible.

 
Average of ratings: -
Wazza
Re: Students can see hidden resources
 

For those having the same problems: my Moodlepartner has told me a 'course cache reset' has fixed these problems. I don't know if I could have fixed this, but to our institute this was a major security leak.

The question is if we can trust Moodle ever again if teachers place information in their courses that should be hidden for students.

 
Average of ratings: -
Me and da boys!
Re: Students can see hidden resources
 

I would ask for further detail on what was done to resolve the error and keep asking until you get an answer that makes sense 

The answer does not make sense to me. What I am saying is- it sounds like something from the server was causing the course to cache but what that would have to do with hide and unhide ...

I know you have a huige moodle site so if some tweek to help your load times had this affect you should get that information documented.

 
Average of ratings: -