Description
Currently a Opencast Block user can import every series he want's into his Moodle course, if he knows the series id.
He then can add, view and delete events in that series in Opencast from Moodle.
I don't see this as big issue, since you'll first need to get the series id from somewhere. Also I'm not sure if it is even practically/possible to check access rights to a series from Moodle in Opencast with the roles provided by the Moodle Role Provider.
But since the issue came up, I wanted to raise it and get other peoples opinions.
Steps to reproduce:
Go to Opencast Block index.php
Click "Manage series"
Import a series you don't have access to in Opencast into your Moodle course
Description Currently a Opencast Block user can import every series he want's into his Moodle course, if he knows the series id. He then can add, view and delete events in that series in Opencast from Moodle.
I don't see this as big issue, since you'll first need to get the series id from somewhere. Also I'm not sure if it is even practically/possible to check access rights to a series from Moodle in Opencast with the roles provided by the Moodle Role Provider. But since the issue came up, I wanted to raise it and get other peoples opinions.
Steps to reproduce: