12 May 2022, 21:57

Hello

We have been using a workflow where staff on a CPD course send a secret URL to their collection to an external reviewer, then submit the collection to the course group for assessment.  This has always worked well for us - until about 7-10 days ago.  Now we find that the external reviewers, who don't have an account on our site, cannot view the page.  Assessors who do have an account on our site can view the page but only if they are logged in.

We upgraded to v 21.10.1 on 18 January and there has been no change to the site since then.  I'm wondering if this is something which actually happened after the upgrade, ie is there some setting that has changed?  Or is this something that was introduced by design?

Regards

Marion

12 May 2022, 22:10

Allow Public Portfolios is set to Yes.

13 May 2022, 20:35

Sorry, should have also mentioned, the message is "non-recoverable error".

16 May 2022, 10:09

Hello Marion,

There is indeed a bug that was introduced in the 21.10 release for this functionality.

I've created a patch for it here -> https://reviews.mahara.org/c/mahara/+/12782

It now checks if one is logged in before calling group_user_can_assess_submitted_views() like it used to do in earlier versions.

Those accessing via secret URL will now not call that function.

Please try the patch on your system

Cheers

Robert

16 May 2022, 20:05

Thank you Robert.

Regards, Marion