[Mahara-contributors] [Bug 1962792] A patch has been submitted for review

2022-04-12 Thread Mahara Bot
Patch for "main" branch: https://reviews.mahara.org/c/mahara/+/12600

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1962792

Title:
  Upgrade ADOdb from v5.21.1 to v5.22.0

Status in Mahara:
  Fix Committed

Bug description:
  https://github.com/ADOdb/ADOdb/blob/v5.22.0/docs/changelog.md

  Includes a security patch for drivers/adodb-postgres64.inc.php:
  https://github.com/ADOdb/ADOdb/security/advisories/GHSA-65mj-7c86-79jf

  An attacker can inject values into a PostgreSQL connection string by
  providing a parameter surrounded by single quotes.

  Depending on how the library is used in the client software, this may
  allow an attacker to bypass the login process, gain access to the
  server's IP address, etc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1962792/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968769] A patch has been submitted for review

2022-04-12 Thread Mahara Bot
Patch for "main" branch: https://reviews.mahara.org/c/mahara/+/12599

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968769

Title:
  SmartEvidence status summary information

Status in Mahara:
  Confirmed

Bug description:
  A row is added to the SmartEvidence overview page at the top and
  bottom of the matrix that provides a total for each status that is
  displayed on the page. Whether a status is displayed or not is
  governed by the framework setup in the site administration (existing
  functionality).

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968769/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1962792] A change has been merged

2022-04-12 Thread Mahara Bot
Reviewed:  https://reviews.mahara.org/c/mahara/+/12569
Committed: 
https://git.mahara.org/mahara/mahara/commit/5d52db2d29c928ce116bfe84d5071275fbc46db0
Submitter: "Robert Lyon "
Branch:22.04_DEV

commit 5d52db2d29c928ce116bfe84d5071275fbc46db0
Author: Dianne Tennent 
Date:   Tue Apr 12 17:19:46 2022 +1200

Bug #1962792: Update version info in adodb/readme.mahara

Change-Id: Id9df1a52b7055e8b1d0d8bc69bc6d59dd8d7eddb
(cherry picked from commit 5fd4a38c286ba5824700cfa1a9eb653b4365f351)

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1962792

Title:
  Upgrade ADOdb from v5.21.1 to v5.22.0

Status in Mahara:
  Fix Committed

Bug description:
  https://github.com/ADOdb/ADOdb/blob/v5.22.0/docs/changelog.md

  Includes a security patch for drivers/adodb-postgres64.inc.php:
  https://github.com/ADOdb/ADOdb/security/advisories/GHSA-65mj-7c86-79jf

  An attacker can inject values into a PostgreSQL connection string by
  providing a parameter surrounded by single quotes.

  Depending on how the library is used in the client software, this may
  allow an attacker to bypass the login process, gain access to the
  server's IP address, etc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1962792/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1962792] A patch has been submitted for review

2022-04-12 Thread Mahara Bot
Patch for "22.04_DEV" branch:
https://reviews.mahara.org/c/mahara/+/12569

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1962792

Title:
  Upgrade ADOdb from v5.21.1 to v5.22.0

Status in Mahara:
  Fix Committed

Bug description:
  https://github.com/ADOdb/ADOdb/blob/v5.22.0/docs/changelog.md

  Includes a security patch for drivers/adodb-postgres64.inc.php:
  https://github.com/ADOdb/ADOdb/security/advisories/GHSA-65mj-7c86-79jf

  An attacker can inject values into a PostgreSQL connection string by
  providing a parameter surrounded by single quotes.

  Depending on how the library is used in the client software, this may
  allow an attacker to bypass the login process, gain access to the
  server's IP address, etc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1962792/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1962792] Re: Upgrade ADOdb from v5.21.1 to v5.22.0

2022-04-12 Thread Robert Lyon
** Changed in: mahara
   Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1962792

Title:
  Upgrade ADOdb from v5.21.1 to v5.22.0

Status in Mahara:
  Fix Committed

Bug description:
  https://github.com/ADOdb/ADOdb/blob/v5.22.0/docs/changelog.md

  Includes a security patch for drivers/adodb-postgres64.inc.php:
  https://github.com/ADOdb/ADOdb/security/advisories/GHSA-65mj-7c86-79jf

  An attacker can inject values into a PostgreSQL connection string by
  providing a parameter surrounded by single quotes.

  Depending on how the library is used in the client software, this may
  allow an attacker to bypass the login process, gain access to the
  server's IP address, etc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1962792/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1962792] A change has been merged

2022-04-12 Thread Mahara Bot
Reviewed:  https://reviews.mahara.org/c/mahara/+/12595
Committed: 
https://git.mahara.org/mahara/mahara/commit/5fd4a38c286ba5824700cfa1a9eb653b4365f351
Submitter: "Robert Lyon "
Branch:main

commit 5fd4a38c286ba5824700cfa1a9eb653b4365f351
Author: Dianne Tennent 
Date:   Tue Apr 12 17:19:46 2022 +1200

Bug #1962792: Update version info in adodb/readme.mahara

Change-Id: Id9df1a52b7055e8b1d0d8bc69bc6d59dd8d7eddb

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1962792

Title:
  Upgrade ADOdb from v5.21.1 to v5.22.0

Status in Mahara:
  Fix Committed

Bug description:
  https://github.com/ADOdb/ADOdb/blob/v5.22.0/docs/changelog.md

  Includes a security patch for drivers/adodb-postgres64.inc.php:
  https://github.com/ADOdb/ADOdb/security/advisories/GHSA-65mj-7c86-79jf

  An attacker can inject values into a PostgreSQL connection string by
  providing a parameter surrounded by single quotes.

  Depending on how the library is used in the client software, this may
  allow an attacker to bypass the login process, gain access to the
  server's IP address, etc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1962792/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1957721] Re: Cannot share portfolio after it has been submitted

2022-04-12 Thread Dianne Tennent
** Changed in: mahara
 Assignee: (unassigned) => Dianne Tennent (dianne-t)

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1957721

Title:
  Cannot share portfolio after it has been submitted

Status in Mahara:
  Confirmed

Bug description:
  Environment: main branch, postgres, Firefox+Chromium

  Steps to reproduce:
  1. Create a controlled group that allows submissions
  2. Masquerade as a member of the group
  3. Submit a page to the group
  4. Return to the page you submitted, click 'Manage access'
  5. Share with a person, admin account

  Expected outcome:
  Portfolio is able to be shared with admin account

  Actual outcome:
  Access denied error: You do not have access to view this page.
  You cannot edit this page because it has been submitted for assessment to 
"Submissions Testing". You will have to wait until a tutor releases the page.

  Note: people should be able to share their portfolios even after they
  have been submitted.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1957721/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968799] A patch has been submitted for review

2022-04-12 Thread Mahara Bot
Patch for "main" branch: https://reviews.mahara.org/c/mahara/+/12598

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968799

Title:
  Position the draggable arrow correctly in Gridstack

Status in Mahara:
  In Progress

Bug description:
  When upgrading to Gridstack 4, the little draggable arrow is not well
  positioned.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968799/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968800] [NEW] Enhancement: User CSV upload to move users to new institution

2022-04-12 Thread Ghada El-Zoghbi
Public bug reported:

Mahara: master
OS: any
DB: any
Browser: any

Curtin University in Perth, Australia ( https://www.curtin.edu.au/ )
would like to contribute a recent enhancement they applied to the User
CSV bulk upload.

Background: The university would like a mechanism to bulk move students
recently graduated to an alumni institution.


Modify the ‘Add people by CSV’ screen with the following:
1. Repurpose the drop-down list of institution and authentication method:
▪ The screen currently has a list of authentication drop-down. But, if updating 
a user, they must belong to the institution with that authentication. Remove 
this restriction and change logic so it's to "move" user to the new 
institution/authentication.

2. Repurpose the 'Force password' change button to send a link that requires 
students to set a password, like a first-time password link that also shows 
them their username.
▪ In the email, include that they have been added to the new institution.
▪ If possible, prevent the sending of a second email when adding the user to to 
a new institution. Otherwise, the users will receive 2 emails (password reset 
and new institution subscription).

3. Repurpose the 'Email people about their account' switch to send the details 
off to the students.
▪ Currently, this switch is only applicable for new accounts.

4. If the old user institution uses ‘remoteuser’ (i.e. LTI does) and new
institution does not (i.e. manual), remove the ‘remoteuser’ record.


5. If the user is in more than one institution, remove them from both 
institutions and move them to the new institution.


6.  All other functionality on the page will remain the same.

** Affects: mahara
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968800

Title:
  Enhancement: User CSV upload to move users to new institution

Status in Mahara:
  New

Bug description:
  Mahara: master
  OS: any
  DB: any
  Browser: any

  Curtin University in Perth, Australia ( https://www.curtin.edu.au/ )
  would like to contribute a recent enhancement they applied to the User
  CSV bulk upload.

  Background: The university would like a mechanism to bulk move
  students recently graduated to an alumni institution.

  
  Modify the ‘Add people by CSV’ screen with the following:
  1. Repurpose the drop-down list of institution and authentication method:
  ▪ The screen currently has a list of authentication drop-down. But, if 
updating a user, they must belong to the institution with that authentication. 
Remove this restriction and change logic so it's to "move" user to the new 
institution/authentication.

  2. Repurpose the 'Force password' change button to send a link that requires 
students to set a password, like a first-time password link that also shows 
them their username.
  ▪ In the email, include that they have been added to the new institution.
  ▪ If possible, prevent the sending of a second email when adding the user to 
to a new institution. Otherwise, the users will receive 2 emails (password 
reset and new institution subscription).

  3. Repurpose the 'Email people about their account' switch to send the 
details off to the students.
  ▪ Currently, this switch is only applicable for new accounts.

  4. If the old user institution uses ‘remoteuser’ (i.e. LTI does) and
  new institution does not (i.e. manual), remove the ‘remoteuser’
  record.

  
  5. If the user is in more than one institution, remove them from both 
institutions and move them to the new institution.

  
  6.  All other functionality on the page will remain the same.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968800/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968799] [NEW] Position the draggable arrow correctly in Gridstack

2022-04-12 Thread Kristina Hoeppner
Public bug reported:

When upgrading to Gridstack 4, the little draggable arrow is not well
positioned.

** Affects: mahara
 Importance: Medium
 Assignee: Evonne Cheung (evonne)
 Status: In Progress

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968799

Title:
  Position the draggable arrow correctly in Gridstack

Status in Mahara:
  In Progress

Bug description:
  When upgrading to Gridstack 4, the little draggable arrow is not well
  positioned.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968799/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968769] Re: SmartEvidence status summary information

2022-04-12 Thread Gold
** Changed in: mahara
 Assignee: (unassigned) => Gold (gold.catalyst)

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968769

Title:
  SmartEvidence status summary information

Status in Mahara:
  Confirmed

Bug description:
  A row is added to the SmartEvidence overview page at the top and
  bottom of the matrix that provides a total for each status that is
  displayed on the page. Whether a status is displayed or not is
  governed by the framework setup in the site administration (existing
  functionality).

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968769/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1894595] Re: Gridstack: Reduce empty space inside blocks

2022-04-12 Thread Robert Lyon
** Changed in: mahara
Milestone: 22.04.0 => 22.04rc2

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1894595

Title:
  Gridstack: Reduce empty space inside blocks

Status in Mahara:
  Confirmed

Bug description:
  There are some cases when there is a lot of blank space inside the lower part 
of a block. This can happen when
  - you resize the browser window
  - we have side blocks (e.g. a group's 'About' page) that reduce the width of 
the content compared to what it looks like in edit mode
  - the content of the block is bigger when viewed in edit mode than it is when 
viewed in display mode, e.g. due to side blocks or when there is no block title 
to display

  We would need to check how to deal with this problem for each
  blocktype.

  Image blocks should remove the empty space every time the content is resized, 
but blocks that display many items that require pagination shouldn't be changed 
when reaching the last page and the content is not as large as the first page.
  We would also need a way to flag this type of block, i.e. the one with 
pagination, to the javascript function that will deal with the empty space in 
the block, for example render the block with a special class or property. Per 
default, the height should adjust to the content displayed automatically no 
matter whether in edit or display mode. The exception / flag will be set for 
the small number of blocks where that shouldn't happen, e.g. potentially the 
journal block with journal entries shown, the PDF block.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1894595/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1958297] Re: Submissions list shows 'Account deleted' entries with link to account that is gone

2022-04-12 Thread Robert Lyon
** Changed in: mahara/22.04
Milestone: 22.04.0 => 22.04rc2

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1958297

Title:
  Submissions list shows 'Account deleted' entries with link to account
  that is gone

Status in Mahara:
  In Progress
Status in Mahara 21.04 series:
  Confirmed
Status in Mahara 21.10 series:
  Confirmed
Status in Mahara 22.04 series:
  In Progress

Bug description:
  We need to handle the entries where the person's account has been
  deleted.

  When the submission was released before person was deleted we just
  need to not show the link but plain text for the 'Account deleted' in
  the 'Name' column.

  When the submission was not released before the person was deleted we
  need to also remove the ability to view page / add accessor / set
  result / change status of the entry as it will not work as the
  underlying page has been deleted

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1958297/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1957721] Re: Cannot share portfolio after it has been submitted

2022-04-12 Thread Robert Lyon
** Changed in: mahara
Milestone: 22.04.0 => 22.04rc2

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1957721

Title:
  Cannot share portfolio after it has been submitted

Status in Mahara:
  Confirmed

Bug description:
  Environment: main branch, postgres, Firefox+Chromium

  Steps to reproduce:
  1. Create a controlled group that allows submissions
  2. Masquerade as a member of the group
  3. Submit a page to the group
  4. Return to the page you submitted, click 'Manage access'
  5. Share with a person, admin account

  Expected outcome:
  Portfolio is able to be shared with admin account

  Actual outcome:
  Access denied error: You do not have access to view this page.
  You cannot edit this page because it has been submitted for assessment to 
"Submissions Testing". You will have to wait until a tutor releases the page.

  Note: people should be able to share their portfolios even after they
  have been submitted.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1957721/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1966138] Re: The set_profile_field() function for email doesn't check for doubleups

2022-04-12 Thread Robert Lyon
** Changed in: mahara/22.04
Milestone: 22.04.0 => 22.04rc2

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1966138

Title:
  The set_profile_field() function for email doesn't check for doubleups

Status in Mahara:
  In Progress
Status in Mahara 20.10 series:
  In Progress
Status in Mahara 21.04 series:
  In Progress
Status in Mahara 21.10 series:
  In Progress
Status in Mahara 22.04 series:
  In Progress

Bug description:
  If I have an account where there is only one email address and I call
  the set_profile_field() to update the account to a new email address,
  eg set_profile_field($userid, 'email', $newemail);

  It will update the person to have the new email address as their
  primary address.

  However, if I have the situation where the person already has two addresses, 
say:
  e...@example.com and e...@example.net where e...@example.com is the primary 
email

   id | artefact_email | artefact_id | artefact_internal_profile_email | 
principal 
  
++-+-+---
7 | e...@example.com |   7 | e...@example.com  |
 1
8 | e...@example.net |   8 | e...@example.net  |
 0

  and I try to update the email via set_profile_field($userid, 'email', 
'e...@example.net');
  the function fetches the primary address one and tries to update it to the 
new address and I end up with:

  
   id | artefact_email | artefact_id | artefact_internal_profile_email | 
principal 
  
++-+-+---
7 | e...@example.net |   7 | e...@example.com  |
 1
8 | e...@example.net |   8 | e...@example.net  |
 0

  Where there is a mismatch on the primary email line.

  We need the set_profile_field() for email to check that the email
  value we are setting the primary email to doesn't already exist for
  this person as one of their secondary emails

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1966138/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1844199] Re: Check skin before when copying a page

2022-04-12 Thread Robert Lyon
** Changed in: mahara
Milestone: 22.04.0 => 22.04rc2

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1844199

Title:
  Check skin before when copying a page

Status in Mahara:
  In Progress

Bug description:
  When creating a site/group/institution page, we should not be allowing
  to choose from "My skins".

  When copying a page, there should be a check to see if the user that
  wants to copy has access to the skin. If not, the skin should not be
  included in the new page.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1844199/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968668] Re: Embedded images not displaying with MySQL

2022-04-12 Thread Robert Lyon
** Changed in: mahara
Milestone: 22.04.0 => 22.04rc2

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968668

Title:
  Embedded images not displaying with MySQL

Status in Mahara:
  In Progress

Bug description:
  Tested on main in Firefox with MySQL

  Steps to reproduce:
  1. Create a page
  2. Add a text block to a page
  3. In the text block content, embed an uploaded image and save the block

  Expected result:
   - Embedded image is visible in page view in both edit and display mode

  Actual result
   - Embedded image not visible in either edit or display mode, just the 
filename

  Clicking on the link to the file gives this error:
  [WAR] 87 (lib/errors.php:530) [ADODB_Exception]: mysqli error: [1064: You 
have an error in your SQL syntax; check the manual that corresponds to your 
MySQL server version for the right syntax to use near '?' at line 1] in 
EXECUTE("SHOW VARIABLES LIKE ?") at 
/home/diannetennent/code/mahara/htdocs/lib/adodb/adodb-exceptions.inc.php:86

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968668/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1962792] Re: Upgrade ADOdb from v5.21.1 to v5.22.0

2022-04-12 Thread Robert Lyon
** Changed in: mahara
Milestone: 22.04.0 => 22.04rc2

** Changed in: mahara
   Status: Fix Committed => In Progress

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1962792

Title:
  Upgrade ADOdb from v5.21.1 to v5.22.0

Status in Mahara:
  In Progress

Bug description:
  https://github.com/ADOdb/ADOdb/blob/v5.22.0/docs/changelog.md

  Includes a security patch for drivers/adodb-postgres64.inc.php:
  https://github.com/ADOdb/ADOdb/security/advisories/GHSA-65mj-7c86-79jf

  An attacker can inject values into a PostgreSQL connection string by
  providing a parameter surrounded by single quotes.

  Depending on how the library is used in the client software, this may
  allow an attacker to bypass the login process, gain access to the
  server's IP address, etc.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1962792/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1943525] A patch has been submitted for review

2022-04-12 Thread Mahara Bot
Patch for "20.10_DEV" branch:
https://reviews.mahara.org/c/mahara/+/12568

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1943525

Title:
  Cookie “mahara” will be soon rejected because it has the “SameSite”
  attribute set to “None”

Status in Mahara:
  Fix Committed
Status in Mahara 20.10 series:
  Confirmed
Status in Mahara 21.04 series:
  Confirmed
Status in Mahara 21.10 series:
  Confirmed
Status in Mahara 22.04 series:
  Fix Committed

Bug description:
  Currently in Firefox on the console log it is warning about:
   Cookie “mahara” will be soon rejected because it has the “SameSite” 
attribute set to “None”

  This exists when viewing the site in http:// mode

  It doesn't seem to be an issue in https:// mode as the cookie can have
  the secure option there

  This can be fixed up by adding the SameSite cookie attribute to the
  session cookie / ctest cookie

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1943525/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1943525] A patch has been submitted for review

2022-04-12 Thread Mahara Bot
Patch for "21.04_DEV" branch:
https://reviews.mahara.org/c/mahara/+/12597

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1943525

Title:
  Cookie “mahara” will be soon rejected because it has the “SameSite”
  attribute set to “None”

Status in Mahara:
  Fix Committed
Status in Mahara 20.10 series:
  Confirmed
Status in Mahara 21.04 series:
  Confirmed
Status in Mahara 21.10 series:
  Confirmed
Status in Mahara 22.04 series:
  Fix Committed

Bug description:
  Currently in Firefox on the console log it is warning about:
   Cookie “mahara” will be soon rejected because it has the “SameSite” 
attribute set to “None”

  This exists when viewing the site in http:// mode

  It doesn't seem to be an issue in https:// mode as the cookie can have
  the secure option there

  This can be fixed up by adding the SameSite cookie attribute to the
  session cookie / ctest cookie

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1943525/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1943525] A patch has been submitted for review

2022-04-12 Thread Mahara Bot
Patch for "21.10_DEV" branch:
https://reviews.mahara.org/c/mahara/+/12567

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1943525

Title:
  Cookie “mahara” will be soon rejected because it has the “SameSite”
  attribute set to “None”

Status in Mahara:
  Fix Committed
Status in Mahara 20.10 series:
  Confirmed
Status in Mahara 21.04 series:
  Confirmed
Status in Mahara 21.10 series:
  Confirmed
Status in Mahara 22.04 series:
  Fix Committed

Bug description:
  Currently in Firefox on the console log it is warning about:
   Cookie “mahara” will be soon rejected because it has the “SameSite” 
attribute set to “None”

  This exists when viewing the site in http:// mode

  It doesn't seem to be an issue in https:// mode as the cookie can have
  the secure option there

  This can be fixed up by adding the SameSite cookie attribute to the
  session cookie / ctest cookie

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1943525/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1943525] Re: Cookie “mahara” will be soon rejected because it has the “SameSite” attribute set to “None”

2022-04-12 Thread Robert Lyon
** Changed in: mahara/22.04
   Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1943525

Title:
  Cookie “mahara” will be soon rejected because it has the “SameSite”
  attribute set to “None”

Status in Mahara:
  Fix Committed
Status in Mahara 20.10 series:
  Confirmed
Status in Mahara 21.04 series:
  Confirmed
Status in Mahara 21.10 series:
  Confirmed
Status in Mahara 22.04 series:
  Fix Committed

Bug description:
  Currently in Firefox on the console log it is warning about:
   Cookie “mahara” will be soon rejected because it has the “SameSite” 
attribute set to “None”

  This exists when viewing the site in http:// mode

  It doesn't seem to be an issue in https:// mode as the cookie can have
  the secure option there

  This can be fixed up by adding the SameSite cookie attribute to the
  session cookie / ctest cookie

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1943525/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968773] [NEW] Improve UX for sign-off and verification

2022-04-12 Thread Kristina Hoeppner
Public bug reported:

The sign-off and verification icons on a page are sometimes cause for
confusion as they are not immediately associated with an action to be
performed.

We are going to change the icons on the page to Yes/No switches but
leave the icons in place on the portfolio completion overview page.
Mock-ups to follow.

** Affects: mahara
 Importance: Wishlist
 Assignee: Robert Lyon (robertl-9)
 Status: Confirmed

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968773

Title:
  Improve UX for sign-off and verification

Status in Mahara:
  Confirmed

Bug description:
  The sign-off and verification icons on a page are sometimes cause for
  confusion as they are not immediately associated with an action to be
  performed.

  We are going to change the icons on the page to Yes/No switches but
  leave the icons in place on the portfolio completion overview page.
  Mock-ups to follow.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968773/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968770] [NEW] SmartEvidence report

2022-04-12 Thread Kristina Hoeppner
Public bug reported:

The report will be based on the 'Portfolio access' report as that
contains information suitable for this report to review the
SmartEvidence information as well as quickly double check that the
correct number of pages is included, especially when a template is used,
and also who has access to the portfolio. It does not require event log
reporting or Elasticsearch.

Existing functionality: 
- The report contains a number of pieces of information. While not all columns 
need to be shown on the interface, they are always included in the downloadable 
file. The downloadable CSV file also always contains all results and not only 
those shown on screen.
- Links to collections will only be available if the person viewing this report 
has access to the collections.

Report components to be set up based on the portfolio access report:
- Owner (first name and last name)*
- Display name
- ID number
- Email address
- Collection (title of the collection that has a SmartEvidence overview page)*
- Pages (number of pages in the portfolio)
- Access list (list of entities who have access to the portfolio)
- A column each for all available statuses with the sum showing for the entire 
collection*

Columns with a * are automatically selected and cannot be deselected.
Other columns can be selected for on-screen display.

The time period will report over collections created within the
specified time frame.

** Affects: mahara
 Importance: Wishlist
 Status: Confirmed

** Attachment added: "report.png"
   https://bugs.launchpad.net/bugs/1968770/+attachment/5580119/+files/report.png

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968770

Title:
  SmartEvidence report

Status in Mahara:
  Confirmed

Bug description:
  The report will be based on the 'Portfolio access' report as that
  contains information suitable for this report to review the
  SmartEvidence information as well as quickly double check that the
  correct number of pages is included, especially when a template is
  used, and also who has access to the portfolio. It does not require
  event log reporting or Elasticsearch.

  Existing functionality: 
  - The report contains a number of pieces of information. While not all 
columns need to be shown on the interface, they are always included in the 
downloadable file. The downloadable CSV file also always contains all results 
and not only those shown on screen.
  - Links to collections will only be available if the person viewing this 
report has access to the collections.

  Report components to be set up based on the portfolio access report:
  - Owner (first name and last name)*
  - Display name
  - ID number
  - Email address
  - Collection (title of the collection that has a SmartEvidence overview page)*
  - Pages (number of pages in the portfolio)
  - Access list (list of entities who have access to the portfolio)
  - A column each for all available statuses with the sum showing for the 
entire collection*

  Columns with a * are automatically selected and cannot be deselected.
  Other columns can be selected for on-screen display.

  The time period will report over collections created within the
  specified time frame.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968770/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968769] [NEW] SmartEvidence status summary information

2022-04-12 Thread Kristina Hoeppner
Public bug reported:

A row is added to the SmartEvidence overview page at the top and bottom
of the matrix that provides a total for each status that is displayed on
the page. Whether a status is displayed or not is governed by the
framework setup in the site administration (existing functionality).

** Affects: mahara
 Importance: Wishlist
 Status: Confirmed

** Attachment added: "sum.png"
   https://bugs.launchpad.net/bugs/1968769/+attachment/5580108/+files/sum.png

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968769

Title:
  SmartEvidence status summary information

Status in Mahara:
  Confirmed

Bug description:
  A row is added to the SmartEvidence overview page at the top and
  bottom of the matrix that provides a total for each status that is
  displayed on the page. Whether a status is displayed or not is
  governed by the framework setup in the site administration (existing
  functionality).

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968769/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968758] Re: Typo in 3437

2022-04-12 Thread Ralf Hilgenstock
6715.
English:Copy text   
Authentication plugin "Web services" verison
Context:
lang/en.utf8/statistics.php plugin_auth_webservice_version

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968758

Title:
  Typo in 3437

Status in Mahara:
  New

Bug description:
  
  Supprt administrators updated
  Context:  
  lang/en.utf8/admin.php supportadminusersupdated

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968758/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968758] [NEW] Typo in 3437

2022-04-12 Thread Ralf Hilgenstock
Public bug reported:


Supprt administrators updated
Context:
lang/en.utf8/admin.php supportadminusersupdated

** Affects: mahara
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968758

Title:
  Typo in 3437

Status in Mahara:
  New

Bug description:
  
  Supprt administrators updated
  Context:  
  lang/en.utf8/admin.php supportadminusersupdated

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968758/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1962246] Re: Upgrade dropzone from 5.9.2 to 5.9.3

2022-04-12 Thread Kristina Hoeppner
** Changed in: mahara
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1962246

Title:
  Upgrade dropzone from 5.9.2 to 5.9.3

Status in Mahara:
  Fix Committed

Bug description:
  https://github.com/dropzone/dropzone/blob/main/CHANGELOG.md

  Fix incorrect resize method used for creating thumbnails of existing
  files

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1962246/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1968668] Re: Embedded images not displaying with MySQL

2022-04-12 Thread Kristina Hoeppner
** Changed in: mahara
   Status: New => In Progress

** Changed in: mahara
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1968668

Title:
  Embedded images not displaying with MySQL

Status in Mahara:
  In Progress

Bug description:
  Tested on main in Firefox with MySQL

  Steps to reproduce:
  1. Create a page
  2. Add a text block to a page
  3. In the text block content, embed an uploaded image and save the block

  Expected result:
   - Embedded image is visible in page view in both edit and display mode

  Actual result
   - Embedded image not visible in either edit or display mode, just the 
filename

  Clicking on the link to the file gives this error:
  [WAR] 87 (lib/errors.php:530) [ADODB_Exception]: mysqli error: [1064: You 
have an error in your SQL syntax; check the manual that corresponds to your 
MySQL server version for the right syntax to use near '?' at line 1] in 
EXECUTE("SHOW VARIABLES LIKE ?") at 
/home/diannetennent/code/mahara/htdocs/lib/adodb/adodb-exceptions.inc.php:86

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1968668/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp


[Mahara-contributors] [Bug 1890356] Re: Upgrade: Elasticsearch-PHP 6.1.0 to latest

2022-04-12 Thread Kristina Hoeppner
** Tags added: newfeature

** Summary changed:

- Upgrade: Elasticsearch-PHP 6.1.0 to latest
+ Implement Elasticsearch 7

** Changed in: mahara
   Importance: High => Wishlist

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/1890356

Title:
  Implement Elasticsearch 7

Status in Mahara:
  Fix Committed

Bug description:
  Related to https://bugs.launchpad.net/mahara/+bug/1865115

  Currently Elasticsearch-PHP is at version 6.1.0. We will update this
  to version 7.X, i.e. the latest in the 7. series

  https://github.com/elastic/elasticsearch-php/releases

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1890356/+subscriptions


___
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help   : https://help.launchpad.net/ListHelp