There are 2 ways for a watchlist on a page to be set up

1) Explicitly clicking the 'Add page to watchlist' link under the page's
'...' (3 dots) menu

2) By placing a comment on the page - the commenter is automatically
added to the watchlist for the page

If the users did neither of these things then I'm not sure how they got
onto the watchlist - unless someone altered the data in the database


You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask 
on #mahara-dev or forum before editing or unsubscribing it!

  watchlist notification email about a page that is not on a watchlist

Status in Mahara:

Bug description:
  Possible GDPR ramifications.

  Student A received a notification that (Student B) Student A's
  Portfolio was updated. Student B does not own Student A's page. Is not
  attached to Student A's page, is not being shared with or two student

  Student A's Portfolio is only shared with her tutors, not fellow
  students. Student B shouldn't have access (and doesn't from what I can
  see) to Student A's page at all.  Let alone to setup a watchlist.
  When I logged in as Student B, there was no evidence that she had ever
  setup a watchlist at all.

  Marhara Version: 18.04.1testing

To manage notifications about this bug go to:

Mailing list:
Post to     :
Unsubscribe :
More help   :

Reply via email to