search

RunestoneInteractive / RunestoneServer

Interactive books for computer science and mathematics
http://runestoneinteractive.org
Other
576 stars 505 forks source link

Duplicate student account #2013

Closed KellyShurtz closed 1 year ago

KellyShurtz commented 1 year ago

I am NOT reporting a bug but requesting that you merge or remove a duplicate student account from the Runestone servers.

My username: KellyShurtz My email: kelly.shurtz@ucas-edu.net My course: ThinkCS_2022-23

Notice the duplicate student in the image below: Tipton

Could you please merge the two Tipton Atwood accounts. If not, can you remove the tiptonatwood user and leave just the TiptonAtwood student? I am providing more information below in case you need to know why.

I created logins for all of my students prior to the start of school. For this student I created the following username and email: TiptonAtwood tipton.atwood@ucas-edu.net

This student did not follow my login instructions the first day and instead set up his own account for my course with the all-lowercase username (but with the same email that I assigned for him). So I believe that both of his Runestone accounts have the same email.

I have removed each of his listed usernames from my course one at a time, I have even removed both of his usernames at the same time from my course, but everytime Tipton opens any ThinkCS assignment from my Canvas LMS course, both of his usernames re-appear in my ThinkCS Student list. I wouldn't mind so much, but Runestone seems to randomly choose which of these two accounts to use when sending scores via LTI to Canvas. Sometimes his scores are correct in Canvas, other times Canvas receives zeros. Infact, if I rescore an autograded assignment in ThinkCS for all of my students, one time it might send his score correctly to Canvas but another time it may send a zero for him for that same ThinkCS assignment.

Thank you for your help. -Kelly

bnmnetp commented 1 year ago

Lots of things going wrong in this scenario.

  1. You should not and do not need to create accounts for your students in Runestone when you are using LTI.
  2. Your student can log in to whichever account you do not want them to use and then go to the profile page and click the necessary items to delete that account. ALL work that is associated with that account will be deleted!!
  3. Removing students from your course does NOT delete them. So when the student comes back from canvas it queries the database for whatever identifier canvas uses (email I think) and asks for the first one that matches. We have no way of knowing in this scenario which one you would like, and emails SHOULD be unique, but he actually created the lowercase account 20 minutes before you created them by uploading the CSV file.

I cannot merge the accounts. that would be extremely time consuming and error prone for me to try to do it manually.

Fortunately it looks like the vast majority of the work was done under the TiptonAtwood account so having them delete the lowercase account should not be too painful.

KellyShurtz commented 1 year ago

Good stuff to know! Thanks. That would be great if you could eliminate the one account. I did write down all of his scores once this started happening, so I can enter them back in manually where needed. I appreciate your help. -Kelly

On Wed, Oct 5, 2022 at 2:54 PM Bradley Miller @.***> wrote:

Lots of things going wrong in this scenario.

  1. You should not and do not need to create accounts for your students in Runestone when you are using LTI.
  2. Your student can log in to whichever account you do not want them to use and then go to the profile page and click the necessary items to delete that account. ALL work that is associated with that account will be deleted!!
  3. Removing students from your course does NOT delete them. So when the student comes back from canvas it queries the database for whatever identifier canvas uses (email I think) and asks for the first one that matches. We have no way of knowing in this scenario which one you would like, and emails SHOULD be unique, but he actually created the lowercase account 20 minutes before you created them by uploading the CSV file.

I cannot merge the accounts. that would be extremely time consuming and error prone for me to try to do it manually.

Fortunately it looks like the vast majority of the work was done under the TiptonAtwood account so having them delete the lowercase account should not be too painful.

— Reply to this email directly, view it on GitHub https://github.com/RunestoneInteractive/RunestoneServer/issues/2013#issuecomment-1268964618, or unsubscribe https://github.com/notifications/unsubscribe-auth/A3FH77UPRGASRHLZULUYBHTWBXTIHANCNFSM6AAAAAAQ52GVZI . You are receiving this because you authored the thread.Message ID: @.***>

bnmnetp commented 1 year ago

@KellyShurtz The student can delete their own account.

I am extremely uncomfortable deleting any account for fear that I could be somehow tricked into removing an account that I should not.

If the student cannot delete their own account then they should email me using the email attached to that account specifying the username they want deleted so I can verify the request and have that request in my records.

Yes, malicious students have tried to get me to delete another students account! So I am very careful.

Brad

KellyShurtz commented 1 year ago

Brad

We successfully removed the duplicate student account (which I didn't know he could do). I then manually entered missing scores into a few of his ThinkCS assignments, and they have been transmitted properly via LTI into Canvas.

I wish to express my gratitude for your help and insights. I'm new to using Runestone's auto graded exercises and to the Canvas LTI, and so the information you have shared with me has been extremely valuable in helping me better understand the Runestone systems.

You, and the Runestone organization that you created, are providing wonderful resources to help us teach more effectively.

Thank you so much! -Kelly

On Wed, Oct 5, 2022 at 4:19 PM Bradley Miller @.***> wrote:

@KellyShurtz https://github.com/KellyShurtz The student can delete their own account.

I am extremely uncomfortable deleting any account for fear that I could be somehow tricked into removing an account that I should not.

If the student cannot delete their own account then they should email me using the email attached to that account specifying the username they want deleted so I can verify the request and have that request in my records.

Yes, malicious students have tried to get me to delete another students account! So I am very careful.

Brad

— Reply to this email directly, view it on GitHub https://github.com/RunestoneInteractive/RunestoneServer/issues/2013#issuecomment-1269044191, or unsubscribe https://github.com/notifications/unsubscribe-auth/A3FH77TP7IJ77TY7XJU4ZKDWBX5HVANCNFSM6AAAAAAQ52GVZI . You are receiving this because you were mentioned.Message ID: @.***>

github-actions[bot] commented 1 year ago

Stale issue message