[Using Sakai] TA Permission question

[Kara Stiles]

David,

I just recreated this and am experiencing the same behavior.  

My TA role does *not* have site.upd, and the only gradebook permissions that are checked for the TA role in the site realm are gradebook.editAssignments and gradebook.gradeSection. Still, my TA is still able to make permission changes in the gradebook.  

Just for testing fun, I removed the section.role.ta permission from the TA role in the site realm, which removed the ability for the TA to change permissions in the gradebook.

It looks like the very permission that identifies a role as a TA (section.role.ta) is the same permission that gives TAs the ability to make permission changes in the gradebook.  

The ability to change permissions in most other tools is managed by the site.upd permission, but I don't think this is true with gradebook in 2.6.

Putting this conversation back on the list to see if anyone has any additional info about this...

Thanks,
Kara



Kara Stiles
Senior Functional Consultant
rSmart
http://www.rsmart.com
ICQ: 396517169

----- Original Message -----
From: "David McPherson" <dmcphers at vt.edu>
To: "Kara Stiles" <kara.stiles at rsmart.com>
Sent: Saturday, September 12, 2009 7:51:29 AM GMT -07:00 U.S. Mountain Time (Arizona)
Subject: Re: [Using Sakai] TA Permission question

Hi Kara,

I tried it on our preprod machine and it did most of what we were  
looking for.  It left the TAs the ability to create grading rules in  
the gradebook which was one of the areas we are trying to restrict.   
Do you know how to only allow instructors to create those rules or how  
to restrict this ability from the TAs?

Thanks,
Dave

On Sep 11, 2009, at 9:28 PM, Kara Stiles wrote:

> Don't forget that if you remove site.upd from the TA role, the TAs  
> will be disallowed from performing the following functions:
>
>
> 1. See the Site Editor tool
> 2. Make changes to site permissions
> 3. Add and remove tools
> 4. Edit the Site Information
> 5. Manage access to the site
> 6. Publish and unpublish the site
> 7. Edit Rosters (if and only if this function is built into your SIS  
> integration)
> 8. Potentially duplicate the site (depends on another permission)
> 9. Potentially import from another site
> 10. Edit the Syllabus
> 11. Add the first podcast
> 12. Manage Forums (unless permission maps exist in local.properties  
> for Forums or if an Administrator creates the first forum and gives  
> another role permission to manage a forum)
> 13. Post Feedback (Using the Feedback/Post 'em tool)
> 14. Edit Web Content URL
> 15. Edit News RSS URL
> 16. Create and Edit Sections (if manual section editing is turned on)
> 17. Potentially add participants to the site (also depends on  
> another permission)
> 18. Potentially manage groups within the site (also depends on  
> another permission)
>
> Kara Stiles
> Senior Functional Consultant
> rSmart
> http://www.rsmart.com
> ICQ: 396517169
>
> ----- Original Message -----
> From: "David McPherson" <dmcphers at vt.edu>
> To: "Kara Stiles" <kara.stiles at rsmart.com>
> Sent: Friday, September 11, 2009 6:00:55 PM GMT -07:00 U.S. Mountain  
> Time (Arizona)
> Subject: Re: [Using Sakai] TA Permission question
>
> Hi Kara,
>
> I think they might...I'll check that out on preprod.
>
> Thanks for the input.
>
> Dave
>
> On Sep 11, 2009, at 8:42 PM, Kara Stiles wrote:
>
>> That seems strange.  Do your TAs have site.upd in the site realm?
>>
>> Removing that permission might remove that ability.
>>
>> Kara Stiles
>> Senior Functional Consultant
>> rSmart
>> http://www.rsmart.com
>> ICQ: 396517169
>>
>> ----- Original Message -----
>> From: "David McPherson" <dmcphers at vt.edu>
>> To: "Sakai" <sakai-user at collab.sakaiproject.org>
>> Sent: Thursday, September 10, 2009 8:06:53 AM GMT -07:00 U.S.
>> Mountain Time (Arizona)
>> Subject: [Using Sakai] TA Permission question
>>
>> Hi,
>>
>> Here at VT we have run into something that seems incorrect to us.   
>> TAs
>> have the ability to modify their own permissions in the grade book  
>> and
>> can set up their own rules for grading.  It seems to us that the
>> reason for requiring the rule is that the instructor should set this
>> up. Has anyone else come across this and does anyone know how to
>> restrict the TAs from being able to do this?
>>
>> Thanks,
>> Dave
>> --
>> David McPherson
>> 1200A Torgersen Hall
>> Virginia Tech
>> Director, OCS
>> 540-231-8993
>> http://www.edtech.vt.edu/ocs/
>>
>> _______________________________________________
>> sakai-user mailing list
>> sakai-user at collab.sakaiproject.org
>> http://collab.sakaiproject.org/mailman/listinfo/sakai-user
>>
>> TO UNSUBSCRIBE: send email to sakai-user-unsubscribe at collab.sakaiproject.org
>> with a subject of "unsubscribe"
>