Learning Sequence: Streamlining of Permission Handling

1 Initial Problem

The current handling of JOIN und LEAVE permissions in the Learning Sequence object is different from other objects in ILIAS like course or group. This leads to problems and wrong configurations and should be changed.

The permissions JOIN and LEAVE have been introduced with the container objects 'Group' and 'Course' to handle the self-registration of users for these object types. The default permission setting for users that are not members yet is to give them VISIBLE and JOIN to see a course/group in the object lists of the repository and to register by themselves to such a course/group (assumed self-registration is allowed). This is why non-members usually do not have READ permission for these objects. They get this permission only by becoming a course or group member.

The object type 'Learning Sequence' in its current implementation behaves a bit different. It uses the JOIN permission to start a learning sequence and the LEAVE permission to finish/complete its use (and to be removed from the list of members). READ permission for the learning sequence gives the opportunity to "look into the object" and even see the linear workflow listing of the embedded objects. But users get no access to the content of learning sequence even if they have READ permission for the embedded objects – as this is only granted by JOIN permission. While JOIN has usually a lower position in the hierarchy of ILIAS permissions than READ, in the learning sequence it is vice versa.

2 Conceptual Summary

The original feature request came with two options to solve the problem and to make the learning sequence behave like other container objects in ILIAS:

In the meantime, I highly recommend to make things easier and to drop these special permissions.

Suggestion : Remove the permissions at all and allow starting the learning sequence with READ permission

Preferred option is to get rid of this confusing permission handling and to remove these permissions at all.

The Learning Sequence would behave similar to the Exercise object where also no specific permission to join or leave the exercise has been implemented.

3 User Interface Modifications

3.1 List of Affected Views

3.2 User Interface Details

none

3.3 New User Interface Concepts

none

3.4 Accessibility Implications

none

4 Additional Information

4.1 Involved Authorities

4.2 Technical Aspects

To modify the existing permissions in the database, a migration is requierd

4.3 Privacy

No change requierd

4.4 Security

The implementation contains no security relevant changes to the ILIAS core.

4.5 Contact

Person to be contacted in case of questions about the feature or for funding offers:  Auerbach, Jeanine [jeanine.auerbach], Clausen, Keven [keven.clausen]

4.6 Funding

Funding status and funding parties are listed in the block 'Status of Feature' in the right column of this page.

The implementation is funded by the Advisory Board‘s budget.

5 Discussion

Kunkel, Matthias [mkunkel], 15 MAR 2023: I would like to fix the permission confusion in the Learning Sequence with ILIAS 9. This is why I have updated this feature request. My preference now is to get rid of the two permissions JOIN and LEAVE and to make the Learning Sequence behave like the Exercise object.

6 Implementation

Feature has been implemented by {Please add related profile link of this person}

6.1 Description and Screenshots

{ Description of the final implementation and screenshots if possible. }

6.2 Test Cases

Test cases completed at {date} by {user}

6.3 Privacy

Information in privacy.md of component: updated at {date} by {user} | no change required

6.4 Approval

Approved at {date} by {user}.