Access list reporting

[Richard Mansfield]

In a school setting, a common problem is students failing to add appropriate access rights on pages that teachers should be able to see for assessment purposes. If teachers can see a list of students' pages, and who they have been shared with, they can then identify and fix these problems quickly. We could solve this problem by giving institutional and site staff access to the existing admin user search page (without letting them change anything), and also creating a new Access list reporting page.

If institutions are used, institution admins and staff will have the user search list filtered by the institutions for which they have admin/staff rights, and will only be able to get reporting information on those users.

[François Marier (fmarier)]

https://reviews.mahara.org/#q,topic:access-list-report,n,z

[Mahara Bot (dev-mahara)]

Reviewed: https://reviews.mahara.org/1000
Committed: http://gitorious.org/mahara/mahara/commit/2f43bf9467f5b10792a7c32a8a7e42114c8b7fc6
Submitter: Francois Marier (<email address hidden>)
Branch: master

commit 2f43bf9467f5b10792a7c32a8a7e42114c8b7fc6
Author: Richard Mansfield <email address hidden>
Date: Tue Jan 17 16:29:58 2012 +1300

    Allow staff to access the admin user search page (bug #919009)

    Staff members will be able to search through all users in their
    institutions, but they cannot edit a user unless they are also an
    administrator for them (institution or site administrator).

    Links from the usernames to the account settings page are only
    displayed when the logged-in user is an administrator for the listed
    user.

    The "edit selected users" button is only displayed to site and
    institutional admins, and the bulk actions page it links to now
    explicitly states which users have been filtered out due to lack of
    institutional admin privileges.

    Email addresses are removed from the list for staff users.

    If the logged-in user is an admin in one institution, and staff in
    another, email is displayed and usernames linked only for the
    'adminned' users. The bulk actions page is still reachable, but any
    selected users who are not adminned by the logged-in user will be
    removed.

    Change-Id: Ia65a960df9af7c5794002007e7580ba5f9a4c9d7
    Signed-off-by: Richard Mansfield <email address hidden>

[Mahara Bot (dev-mahara)]

Reviewed: https://reviews.mahara.org/1004
Committed: http://gitorious.org/mahara/mahara/commit/6266cae93c76efd2c45392be1a21bc864138461c
Submitter: Francois Marier (<email address hidden>)
Branch: master

commit 6266cae93c76efd2c45392be1a21bc864138461c
Author: Richard Mansfield <email address hidden>
Date: Fri Jan 20 14:19:43 2012 +1300

    Add admin report on access lists of user pages (bug #919009)

    Adds a new "User reports" page to the admin section, accessible by
    admins, which produces a list of all the pages owned by a given set of
    users, and a list of who is on the access list for each page.

    The users are selected using the checkboxes on the admin user search
    page, and the page is reachable from admin user search using a new
    "View reports" button on that page.

    The CSV download that previously appeared on the Bulk actions page is
    more appropriate on a reports page, so CSV download is also moved from
    Bulk actions to User reports. Email and remoteuser fields are only
    displayed to site and institution administrators.

    Because some sites will not want to allow staff to see the page access
    lists of all users in their institutions, access to this page by staff
    is controlled by a new "Staff report access" site setting.

    Change-Id: Id02b58416e3dfb28fd39c1170426ddefe6669efe
    Signed-off-by: Richard Mansfield <email address hidden>

[Melissa Draper (melissa)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 status fixreleased
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPjrZVAAoJECXBtiziiXdcS3oIAJgrwXm2JGD/y1azBwhHoMLL
x7gg30QpnnlKu2Cnz9FQBBNXS3c3avtDysNR6UAmXmtO4IHvrcl8QZB4NP2j31Qd
WbtmXSjKFijA1wGhqhIJXrRxTDZQBEHNLIRnIUIPqny+YRJtqHIR3a5rSRYUEiiR
UreRpHjMubPyNKbJSHclRKK4LzOZAng7c8CwL0f+y1GnmUoFVy8gZweasWtq0pwk
XWHYlOxf+i11rrEyV3abVFsWGn/F7Fj2uI00V3E5U/15cYb0+WQ9eiSDnDpKC7l0
QvcNHx6w9vuN21ROyjBrOfhfD+s6aBow046EMBpR7SFbR7vCOdxwxh4WYcqIKVM=
=bsqZ
-----END PGP SIGNATURE-----