Details
-
Bug
-
Status: Closed (View Workflow)
-
P2
-
Resolution: Done
-
None
Description
As described in comments to UICR-61, a user whose only visible permission is "Courses: Add, edit, and remove items" (course-reserves.maintain-items), while not offered the Edit instructor and Remove buttons, is offered the Add instructor button — and the instructor-adding then fails with a permission error.
The Add instructor button should be guarded by a suitable permission check.
TestRail: Results
Attachments
Issue Links
- relates to
-
UICR-61 Permissions: Courses: Add, edit, and remove items
-
- Closed
-