We are in mid-implementation of Moodle in a college containing around 2300 students, on approximatly 200 courses. Before unleashing the system on our students we are training up the staff, and already a number of issues/ideas have been raised.
1. By default, all users can change their password (if the authentication method is set to manual) I haven't found a simple way to turn this off through Moodle's Interface, and so have hard-coded the change, so passwords can only be changed by the Administrator.
2. Also, the users can change their own details by default. While I can see an obvious advantage to allow users to do this - it makes the system appeal to students if they can change their description and photo / image - but this also opens up (initially) the system to abuse. We are worried about students potentially changing their images to pornography, or writing unwanted comments in their descriptions. Our system has already been tested with a few classes of students, and already we have a ''Tupac Amaru Shakuar" attending our college.
Again, I have hard-coded a change, so that only administrators can edit profiles.
Maybe these options could be implemented in future releases of Moodle? Say as an option in the Administrator's tools?
Matt Softly
