Portfolio still on watchlist even when access was revoked
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Mahara |
Confirmed
|
Medium
|
Unassigned | ||
Bug Description
When someone has a portfolio on their watchlist but their access has been revoked, the portfolio is not removed from the watchlist. It would be better if it were because the watcher can't view it any more.
To replicate:
1. Have two people on the site.
2. Person A shares a portfolio with Person B.
3. Person B logs in and adds the portfolio to their watchlist. Check that the portfolio appears in the block 'Watched pages', which is a default block on most dashboards.
4. Person A removes the access for Person B.
Results:
- Expected: Person B can't see the portfolio any more on their watchlist.
- Actual: Person B still has the portfolio on their watchlist, but can't access it any more.
There should be a notification that states that portfolio X was removed from your watchlist because you don't have access to it any more. This action could happen on the normal watchlist cron.
| description: | updated |
| Kristina Hoeppner (kris-hoeppner) wrote | #1 |
Idea: New flag for 'access rules changed' as an 'event' that can be put into the watchlist queue so it is processed next time the cron checks the queue.
The DB upgrade step should go over entire table to catch any access permissions that don't exist any more and should suppress email notifications as people may have lost access a while ago. After the upgrade, notifications should be sent though.