One of Joseph's new features in 2.5 questionnaire is the show non-respondents report which allows you to see a list of the students who haven't submitted survey answers and to send them a message.
Something we've just noticed is the way it works with groups...
- If there are no groups then any-one who can see that report can see the entire list of students on the course and message them.
- If there are visible groups then any-one who can see that report can see the entire set of groups and each group's list of students on the course and message them.
- If there are separate groups then any-one who can see that report can see the groups of which they are a member and each group's list of students on the course and message them.
It seems a little scary to me that any-one, like with the non-editing teacher role, would be able to see the full list of students on the course and message them. Perhaps you should only be able to message people you're in a group with? And maybe you shouldn't be able to see other groups member lists - but I'm not sure how that works elsewhere in Moodle.
What do others think? Should we further restrict access to the list & messaging feature?