CVS log for loncom/auth/roles.tab

Up to [LON-CAPA] / loncom / auth

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- Authoring Space defaults defaults which domain coordinator can override.
  - Available Editors, WebDAV access, Disk Quota for Authoring Space
    can be set for specific users by DC via "Add/modify user"
- Bug 5273 Co-authors in "group authoring" accounts can manage co-authors
  - Existing co-author(s) can be assigned rights to add/revoke co-author
    roles. Can be set by DC via "Add/modify user" or by author via "People"
- Co-authors and Assistant co-authors can view a list of co-authors for
  the Authoring Space. Availability set by Author or Co-author "manager".
  Listing can be set to "opt-in".

- Bug 6955
  Domain Coordinator receives 'evb' (Evade communication blocking) privilege.

- Reverse change in rev. 1.28 (which was for bug 3109).

- Support domain configuration which allows a Course Owner to change a
  student's password, if:
 (a) same domain is used by owner, course, and student
 (b) student has no active or future roles besides student role in courses
     owned by the course owner making the change
 (c) course container is not Community or Placement Test
 (d) owner is course cordinator in the course
 (e) setting to disable this action has not been set for the specific course

- Bug 5718. Permit instructor role to upload bubblesheet data file to course.

- In course context the Functions menu will include a "View source" item/icon
  for a published assessment item, if the user does not have rights to edit,
  and either of the following are true:
  (a) user has a cre priv, and content has source set to "open",
  (b) user has vxc priv (View XML of assessments in course where
      course owner/co-owner is author/co-author of content).
- vxc priv is assignable to custom role, including ad hoc custom roles
  which can be made available to users with domain helpdesk role.

- Domain Helpdesk Assistant role for use by domain helpdesk student employees
  - browse access to shared repository (including own domain) is excluded.

- 'cev' priv assignable to custom roles in course/community allows
  view-only access to Course Editor.
  - Intended for assignment to custom ad hoc course/community roles assignable
    to domain helpdesk personnel.

- "View course groups" (vcg priv) privilege can be assigned to custom roles.

- New privs for assignment to Domain Helpdesk role to support viewing but
  not modifying user's tools, domain settings, and unexpired roles.

- "View student activity" (vsa priv) privilege can be assigned to custom roles.

- vpa privilege in a course allows Content Settings to be displayed, but
  not modified (which requires opa priv).
- vcb privilege in a course allows "Exam" Blocking items to be displayed,
  but not modified (which requires dcm priv).

- "User Access Log" item added to User Management Menu (Single Users) in
  domain context -- 'vac' priv assigned at domain level to domain coordinator
  and domain helpdesk.
- Can search for user in a domain, and view log-in, logout and role selection
  history, as recorded in user's activity.log file.

- 'dcc' priv assigned to Domain Helpdesk role so course creation log and
  and queued course requests are viewable by a user with that role selected.

- Add role for domain helpdesk staff

Saving my work on Bug #1320.

- Accommodate Communities
  - Custom role template depends on course type.
  - System-wide bre priv unavailable in custom roles used in Communities.
  - System-wide bro priv (own authored/co-authored published resources)
     available for custom roles in Communities.
  - Community Roles (including custom roles) will not be displayed in LON-CAPA
    versions 2.9 or older.

- Bug 4315.

- bug 5453.
  - "bro" priv (created for Community Coordinators) now also assigned to
     Assistant Co-Authors.
  - &lonnet::allowed() check for "bro" access now checks user's roles for both
    active "ca" and "aa" roles.

- New role: co  (Coordinator for course of type Community).
- New priv: bro (To allow a Coordinator to browse own published resources).
  - Privs for cc and co are similar except co doesn't have system wide browse in
    shared repository.

- Correct display of privileges for "Templates" for Course Coordinator and Instructor, in Custom Role Editor.
  - Need to check for domain-based or system-based privs for course privs.
  - Need to check for system-based privs for domain privs.
    - sma priv is domain based for cr, but system based for cc, in
    - bre priv is system based only for cc.
  - Add las, pac, and dch privs to cc:c.

- Bug 5839
- New privilege (for DCs) to allow setting of user-specific availability of user tools - About Me, Portfolio,and Blog.

Bug #5649: Instructors can see user notes

- BUG#5335 - move vcl to a corse restricted permission

- BUG#5070, split 'Display Face to face' abilities away from broadcast message send priviledge.

evb privilege - with this privilege users evade blocking of communication functionality defined by blocks placed by users with dcm privilege.

dcm privilege - this is now used to determine if link to block setting is displayed.

loncommon::findallcourses() now return a hash, where the keys are courseIDs instead of an array of courseIDs.  Places where findallcourses() was called - lonannounce, lonpickcourse changed accordingly.

loncommon::findallcourses() now reports courses for a user where the user's only role was a custom role.

lonnet::allowed() can now take a fourth optional argument ($role) which allows privs to be investigated for roles other than the user's currently active role

&blockcheck, &parse_block_record(), and &build_block_table() moved from lonmsgdisplay to loncommon, so they are available for evaluation of blocking state for other communication functions besides COM.

Each block record for a blocking event in a course is now a hash, with key=values of the hash being setter = username:domain of user who set block, title=event title for block, and blocks = hash of blocked features ('com','chat','boards','port','groups').

Backwards compatibility retained with previous : separated text for block record value.

Users with "mpq" privilege for a domain can set and modify the portfolio quota for a user in the domain.

When a user uploads a file to his/her portfolio, the user's portfolio quota is retrieved, if one has not been set, the default for the domain is used, if no default has been set, the original static value of 20 Mb for backwards compatibility.

In the future we might want to consider different defaults for different types of user in a single domain.

- seperating PGRD from ability to 'Grade items in the grading queue'

- remove from TA role ability to send broadcast and Critical messages

Add whn privilege to make what's new available to cc, in, ta and custom role. Display NEW button for users with this privilege in a course.
CeS: ----------------------------------------------------------------------

; removnign extra lines addeed in 1.42

Bug #3158: DC can send critical messages

Including the view course groups (vcg) privilege for course coordinators.

- add print controls to au and ca

- BUG#4321, stop checnking request.role.adv for wheterh advanced printing can be done, 2 new privledges 'pfo' Print for otheres, and 'pav' advanced printing options (i.e with answers etc.)

New permissions to manage and display course groups.

- BUG#4386 Custom Roles should be allowed to be configured to allow global bre

- add permission for bridgetask queue viewing

Back in town.

Bug #4153: DC can define custom roles

Allow DCs to delete/revoke AA roles

Bug #4135: underprivileged "assistant co-author"
Part of Bug #1900: CUSR shows up for authors again

- bug #4073, DC can revoke CA roles of the same domain of the DC role
  (it has been tested so that it continues that AU can't revoke other CA roles (BUG#599))

- NSDL backports

- allow custom roles to be able to modify classlist BUG#3882

Added 'vcl' permission.
londropadd.pm: rewrote &print_main_menu to only show actions the user has
the ability to perfrom.  Modified &handler to restrict access to functions
based on vcl & cst permissions.

- make adv a real role priv

- add mdc to be able to be assigned to a custom role

Added vsa - view student activity permission.

- fix up permissions and the visuals for IN with a section to attempt to grade people not in their section BUG# 3109

Added instructors in a section vgr.

- give CC the role to upload scantron data

- adding new user role 'Scantron Operator' for uploading scantron grades,
- adding new user permission 'usc' Upload Scantron grades, by default dc and sc can do it.

- backport 1.24

Instructors: it's important what's in the course, not what's in the domain.

Bug #2148: new "mdc" privilege to edit/modify DOCS

Bug #815: Frontpage announcements can now be entered by
Superusers and Domain Coordinators
on a per-machine-base from "CLDR (Calendar/Announce)".

Bug 679: Need to be able to disable chatroom.
   Added plc (permission for live chat).
   lonchat.pm and lonchatfetch.pm now both call &lonnet::allowed('plc',...)
   lonparmset.pm, loncreatecourse.pm, and course.initialization.helper
       now all allow setting $ENV{'course.'.$courseid.'.plc.roles.deny'}
       lonparmset.pm also allows the user to set
       $ENV{'course.'.$courseid.'.plc.users.deny'}
   lonmenu.pm was modified to allow us to require the user both be in
       a course AND have permissions.
   mydesk.tab, roles.tab, and rolesplain.tab were modified to include the
       new role.

Install new managekeys handler, make new permission "mky" to invoke it

Routines to complete delete a role, using lond's rolesdel command.
New privilege "dro" for doing so.

Domain Coordinators have systemwide browse

Set "course preference roles denied" and bugfix in lonnet.

Chatroom functions according to course preferences

Authors can browse systemwide.

Allow Course Coordinators to see anonymous postings

Course Coordinator can modify grades - so there!

Co-Author can do something

Co-Author role

Make ability to create domain coordinator system wide

Bug: ':' instead of '&'

Domain Coordinators are not in courses

Course coordinator can enroll students

Browsing can be locked for individual resources

Communication can be locked

Superusers and Domain Coordinators can modify login data

Locking and setting parameters for assessments is resource dependent

Disabling messaging and return-receipt emails not resource dependent

The roles definitions