Review groups with hidden membership

[Darren James Harkness]

We have a use case for groups where a user has requested that we be able to have a student submit their portfolio to a set of anonymous reviewers. The simple way to deal with this is to assign access to a review group, but there does not seem to be a way to edit permissions to hide the membership of a group.

There are two ways I can see addressing this:

1) A new group type that works along the lines of invite/controlled for membership, but only discloses the list of members to admin/staff.
2) Add view permissions to the existing group types so that you can control who has access to view membership.

Version: 1.2
OS: Linux
Database: Postgres

[Darren James Harkness (darren-athabascau)]

An additional piece for this request is that non-admin/staff users should not be able to view other users' submitted portfolios.

[Kristina Hoeppner (kris-hoeppner)]

More info / discussion at http://mahara.org/interaction/forum/topic.php?id=2229

[Darren James Harkness (darren-athabascau)]

Hi Kristina - this is a different issue from the discussion you linked to. The request is not to hide group membership from those outside the group, but rather to hide staff/admin users from those within the group itself. So, for example, if Student A and Staff Member B are both members of the Portfolio Review group, Student A should not be able to see that Staff Member B is a member of the group. ideally, Staff Member C should not be able go see Staff Member B either to support the notion of a blind review system (this might mean the need for a Reviewer role).

[Kristina Hoeppner (kris-hoeppner)]

Hello Darren,

Sorry for the incorrect wording. It's not exactly the same idea, but I think there are similarities and it will be good to look at both discussions when dealing with a review group / reviewer role etc. to look at all possible scenarios and see how they can be solved instead of only looking at a small part. That doesn't mean that everything could be implemented immediately, but at least the features should be developed in such a way that others of a similar nature can then be added once funding becomes available.

[Darren James Harkness (darren-athabascau)]

No problem - I just didn't want the original request to be lost in the shuffle.

[François Marier (fmarier)]

https://reviews.mahara.org/#change,664

[Mahara Bot (dev-mahara)]

Reviewed: https://reviews.mahara.org/677
Committed: http://gitorious.org/mahara/mahara/commit/9f8cf99032bd2c9c4f69553c05b129e0548ea368
Submitter: Richard Mansfield (<email address hidden>)
Branch: master

commit 9f8cf99032bd2c9c4f69553c05b129e0548ea368
Author: Richard Mansfield <email address hidden>
Date: Mon Sep 12 11:10:09 2011 +1200

    Hide member counts when user can't list members

    When the logged-in user can't get to the member listing for a group
    (bug #845287, bug #504830), it seems like a good idea to also hide
    the number of members.

    Member counts are hidden in the group info block and copy a view page
    by moving member & view counting into the group_get_groupinfo_data
    function, and performing the permission check in one place for both
    pages.

    Member counts are hidden on My Groups and Find Groups inside the
    group_prepare_usergroups_for_display function.

    Change-Id: Ibe5675861040cedf67c2ddff7647117cd155722a
    Signed-off-by: Richard Mansfield <email address hidden>

[Mahara Bot (dev-mahara)]

Reviewed: https://reviews.mahara.org/664
Committed: http://gitorious.org/mahara/mahara/commit/6ddb75076f559494bcd3c7106affa1cb8664fa66
Submitter: Richard Mansfield (<email address hidden>)
Branch: master

commit 6ddb75076f559494bcd3c7106affa1cb8664fa66
Author: Richard Mansfield <email address hidden>
Date: Tue Sep 6 16:10:30 2011 +1200

    Add 'hidemembersfrommembers' group setting (bug #504830)

    This creates groups in which members can't search for each other.
    Group admins can get to the member listing, but tutors cannot: the
    stated use case is anonymous reviewer groups.

    Change-Id: Id2550e574b55ceeb43958475340e967de16850f1
    Signed-off-by: Richard Mansfield <email address hidden>

[Mahara Bot (dev-mahara)]

Reviewed: https://reviews.mahara.org/737
Committed: http://gitorious.org/mahara/mahara/commit/7f891664fb40be1e1eb976009bdd61eef078b597
Submitter: Richard Mansfield (<email address hidden>)
Branch: master

commit 7f891664fb40be1e1eb976009bdd61eef078b597
Author: Richard Mansfield <email address hidden>
Date: Mon Sep 26 17:07:37 2011 +1300

    Enable 'hidemembers' when 'hidemembersfrommembers' enabled (bug #504830)

    On the edit group form, ensure that 'hidemembers' is checked when
    'hidemembersfrommembers' is checked. This doesn't affect the way the
    settings are interpreted on the site, but may give the user a better
    understanding about how the settings work.

    Change-Id: I4741a80be342b693e1af515f74cdc30828927c5b
    Signed-off-by: Richard Mansfield <email address hidden>

[Mahara Bot (dev-mahara)]

Reviewed: https://reviews.mahara.org/1085
Committed: http://gitorious.org/mahara/mahara/commit/30647bfd65aced3be235dae00b794a52b4bb6dc0
Submitter: Francois Marier (<email address hidden>)
Branch: master

commit 30647bfd65aced3be235dae00b794a52b4bb6dc0
Author: Kristina D.C. Hoeppner <email address hidden>
Date: Fri Mar 2 22:15:29 2012 +1300

    Add info about hidden group membership listing (Bug 504830)

    For the changes made in groups, help files need to
    be adapted to reflect that group members may not
    have to be made visible in the "Members" tab if the
    group admin hides the membership listing for members
    or non-members.

    Change-Id: I5400421b6c005211be0afd93d6ed1b1db212123c
    Signed-off-by: Kristina D.C. Hoeppner <email address hidden>

[Melissa Draper (melissa)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

status: fixreleased
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPjqbSAAoJECXBtiziiXdc9lQH/ihyu7QAsQTauz6R0kgBF2og
xGfwoCzflrqvhr0M52SR9mS/oVvb0ZerWl6CL2aJ8Aq5dTGNZ2+dHsDZTTYGQzF0
qLheaMcgjVQyCasJQzFwP4eVhxP5d7PUvHTPoB2SfQOMrzb6LdbF3ZuaPk11bImk
zjRhyzLIDuqPGCvkm/RSr3RlyuLlQD6/mSXfHLXRMKuG6ZXZQdgwvAgbRVrqCukJ
HeAfb9i1gVLgMoKO1OGur+sCYD155g6GtykNolwC1vXGI2lwL5yko4rBq47m1zTJ
iEMJngvutbkLqfkLye2DrqEGfPdJSD28cn0yTrGo4r8c8v+VErQG2fw28Do62AQ=
=PEOy
-----END PGP SIGNATURE-----

[Melissa Draper (melissa)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

status fixreleased
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPjrKtAAoJECXBtiziiXdcUwoH/2T7TneDztExyzwY3jqJTs/Y
RyZ+uApeCE5D2ICXyJjXwQa5J4hwSnVwXWB6W0BGUspaTlHk5DU2uHMV7tJ6GnyK
+Z/jxi99+oRi3ejXk21hpZou9c1uPTtHHzNw8l/y8S3yOBwo+kWE9UNjrpYHNGZc
BRtQyh447e+4x4ocrR5ldieyEo5gYiFztVAtxNKSx00iCTpGXEiGmLKQ+8RhABMc
b/yOYWmLrgcBrvbC8xuQWZoXYgiZvsC0pjZnMHVW1SDrXHLbxsdcE1D/T1Vm+U7q
f0tHry8pHQnJQlbd8hm6vlOQR8Zo3wEB8knRCR0euQFr9oC32PBHaVLHZ75Dx+4=
=NY/1
-----END PGP SIGNATURE-----

[Melissa Draper (melissa)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 status fixreleased
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJPjrT9AAoJECXBtiziiXdcoRgIAI6WEF/A3ND2GQDSpnq5f/tC
dX+/FeJZVxYHJpRv9z3v9pQ47AuNacrcWJkRdDsc7A+/XEP++DWUU5lvYy65941s
gekqH765BpnPqOU3QAWzhhQqQAJo/aSk94H+YZCoJTtw4tA4sOWxITkItb1SAt33
Q8bnKihJZYHtgfKtEv7gzd2oyk5Jk1xAJjE8fpcJpjXdkpF2Gda82JOpR2hrFnfo
k/nH5VLwHELKBMmLhFjTasfe2R5/LjBaDQp4r93ZdZBl5qer00yUQoEIgInJg+LK
Rs5onHkg5YWn5ezTrMkRBAp/goHyrcYaunC4sJ4cazP1+YtC10oJq8fnuv1Xq9A=
=fz6e
-----END PGP SIGNATURE-----