[Building Sakai] samigo privilege escalation?

[Gordon, Patricia (psg3a)]

Stuart,

I recall in our 2.5.x instance that if an assessment was configured for Immediate Feedback and Random Access, then students could view certain components that the instructor had enabled for feedback from the Table of Contents, such as the correct answer or question scores, while taking the test. I have never seen or heard a report of students being able to view a question pool while taking an exam, though. Could the instructor have mistaken the Table of Contents view of the assessment questions as the question pool?

Trisha Gordon
University of Virginia




> -----Original Message-----
> From: sakai-dev-bounces at collab.sakaiproject.org [mailto:sakai-dev-
> bounces at collab.sakaiproject.org] On Behalf Of D. Stuart Freeman
> Sent: Friday, July 01, 2011 2:30 PM
> To: sakai-dev at collab.sakaiproject.org
> Subject: [Building Sakai] samigo privilege escalation?
> 
> We've received a report of an instructor witnessing a student viewing her
> samigo question pool. The student was having trouble starting an
> assessment, called the instructor over, and the instructor reports seeing
> the question pools on the student's screen.
> 
> Our event table dosn't show anything out of the ordinary for the two
> accounts involved, and switching user to the student account doesn't allow
> us to look at the pools.
> 
> Has anyone else seen anything like this, or have any ideas what might cause
> it? (In case you're wondering we're on 2.5.x, but jira hasn't turned up
> anything that looks relevant).
> 
> --
> D. Stuart Freeman
> Georgia Institute of Technology