Role Permissions / RBAC Changes in 3.8.x

Some important RBAC changes have been made for ILIAS version 3.8. Please take these changes into consideration and adopt roles and role templates of your ILIAS installation accordingly.

With 3.8 it is also possible to change existing permission settings only for one or more selected object types. The option for this is at the end of every permission block.

New Permission COPY

In the Object Permission Settings of all objects there is now a new permission COPY for general operations (besides the existing permissions VIEW, READ, WRITE, DELETE).

Till ILIAS 3.7 the permission to copy an object was associated with the WRITE permission. Since 3.8 this is separated! Now it is possible to allow a role to copy an object from the current category A to category B, but not to edit this object in category A (because of the missing WRITE permission for this role in category A).

This change allows to create templates for courses or learning modules that can be offered for copying - and to make sure that these template objects are not changed by other users then the template maintainers.

Permissions for New Modules

With News Feeds and Mediacasts new features have been introduced in ILIAS 3.8. Therefore also new permissions to use these new object types are now existing. The permission settings for existing roles and role templates need to be updated manually. The permissions are:

• General permissions for mediacast (Change permission settings, visible, read access, copy, edit, delete)

• Create permissions for mediacasts in:

  • Categories

  • Courses

  • Groups

• General permissions for web feeds (change permissions, visible, read, edit, delete)

• Create permissions for web feeds in:

  • Categories

  • Courses

  • Groups

• News and web feeds settings (for administration)

Permission for Test Statistics

A new RBAC permission for tests has been introduced to allow other users than those with write permission to READ the test statistics of test participants.

Removed Survey Permission Participate in a Survey

The permission Participate in a Survey was removed from a survey object. It is now sufficient to own read and visible permission to start a survey. This step was necessary to be compliant with other ILIAS objects.