Minervis-GmbH / BigBlueButton-Ilias-Plugin

BigBlueButton Plugin for ILIAS LMS
https://docu.ilias.de/goto_docu_dcl_3342_1_73.html
GNU General Public License v3.0
8 stars 18 forks source link

Critical course member recording access configuration problem #44

Open wirepatch opened 1 year ago

wirepatch commented 1 year ago

Creating a BBB virtual classroom within a given course requires granting harmful permissions.

Situation: An ILIAS course containing a virtual BBB classroom. By default all BBB recordings are invisible to registered course members. This happens although both Visible and Read permissions are being granted to the BBB classroom's Course Member role.

The only way allowing Course Member acces to these recordings requires granting the Edit Settings permissions as well. Unfortunately as a negative side effect this in turn enables course members to delete any recordings .

BTW: Our ILIAS installation is on current 7.20 running BBB Minervis plugin v1.0.15-49-g4c0817 updated yesterday. The current problem description however bites for years

xJuvi commented 1 year ago

Hi there, which solution do u prefer? Access to recordings for every course member oder should the access be granted with a new permission set?

Kind regards

wirepatch commented 1 year ago

Hi there,

Short input: Member roles having both »Visible« and »Read« permission are currently allowed to join the respective BBB classroom. In my opinion these two permissions should suffice for accessing recordings as well.

Rationale: I can hardly imagine a member being allowed to participate in a course recording but not having the privilege to view its outcome later. There is thus no need for a new permission set.

Longer Input: I may be wrong. BBB's own »Greenlight« client allows for setting four different access levels »Public«, »Protected«, »Unlisted« and »Inaccessible« for each recording individually. A new recording's default access level is »Protected« thus being invisible to regular users. So the room's owner has to actively grant access on each recording individually for publishing the beast in question.

I only once had the urge not to publish a new recording: After finishing a lecture I discussed an exam related issue with a student. I forgot to mute the mic beforehand and did not want to see our conversation go public. I could have solved the issue in an Ilias plugin context by temporarily disabling room access as long as it would have taken to delete the recording in question. A bit more cumbersome than in Greenlight. On the other hand most of the time it is convenient having recordings go online automatically. As usual: Different authors having different needs / opinions / favours.

With respect to the BBB Ilias plugin this however requires permissions being defined on individual recording scope rather than just the containing BBB room in question. It may confuse existing ILIAS course admins. Finally it'd require a more complex implementation approach. I'm fine with simple solutions 😎