<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-GB link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Hi all<o:p></o:p></p><p class=MsoNormal>I was made aware of a slight issue with the Moodle authentication recently and have investigated further and confirmed that in certain scenarios there is an issue but I think an easy enough fix…<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>In auth_config.php we have some uncommented and commented code specific to moodle authentication. First we have an uncommented/active section of code where it checks if the authentication method set is Moodle and if so then checks if the logged in username is guest and if it is displays a you don't have permissions message to prevent guest users from authoring with xerte. We've had this for a long time and it mostly works ok but if the moodle allows guest login to courses that contain links to public xerte LO's this code also prevents access to those LO's not just to the workspace. If someone visits the public links without first logging in to Moodle as guest then it works fine. I think this has been the case for quite a while now but isn't often picked up as an issue because it's only an issue in this specific scenario. I also think it only became an issue when the authentication code was moved in a much earlier version.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I've tested the following but wanted to check your thoughts before making the changes and committing….<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>1. Move the uncommented //restrict moodle guest access code and the commented //restrict moodle access via custom moodle profile field named xot code to a new file names moodle_restrictions.php<o:p></o:p></p><p class=MsoNormal>2. add a require to that file around line 46 of index.php just under login_processing2();<o:p></o:p></p><p class=MsoNormal>3. Update moodle_integration_readme.txt accordingly<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>This change means that the code still works and prevents access to the authoring workspace but doesn't prevent access to public LO's even if logged in to moodle as guest.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Ok for me to make and commit these changes? <o:p></o:p></p><p class=MsoNormal>Or is there a different/better way to achieve this?<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Ron<o:p></o:p></p></div></body></html>