New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multisite: Bulk Learner Actions shows all users in the network to subsite admin #2143

Closed
richardmtl opened this Issue May 15, 2018 · 1 comment

Comments

Projects
None yet
4 participants
@richardmtl
Member

richardmtl commented May 15, 2018

Reported in 1160956-zen

Bulk Learner Actions ( /wp-admin/admin.php?page=sensei_learners&view=sensei_learner_admin ) shows ALL the learners across the multisite (including those in other subsites) to the current subsite admin (not the super-admin). This is where we query the learners:

private function get_learners( $args ) {

I think it's reasonable to expect that if Sensei is being used in multiple sites in a multisite, that the local admin would only be able to manage the Learners on their own subsite.

@amroland

This comment has been minimized.

amroland commented Jun 12, 2018

This bug unfortunately causes GDPR problems. The current subsite admin can see such users' data which should not be seen by him.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment