TUM-Dev / gocast

TUMs lecture streaming service.
https://live.rbg.tum.de/
MIT License
177 stars 41 forks source link

Private VoDs are still publicly listed #1266

Closed JosefSchoenberger closed 2 months ago

JosefSchoenberger commented 6 months ago

Describe the bug A private VoD is still listed in the students' view of a course. Clicking on it leads to a 403 permission denied error page.

To Reproduce Steps to reproduce the behavior:

  1. Go to a course's admin page
  2. Set a VoD to private
  3. Go to the students' view of the course (e.g. using impersonation)
  4. See that the VoD is still listed
  5. Click on the VoD
  6. See the 403 error page

Expected behavior A private stream should not be listed to students at all. Perhaps, course admins should still be able to see the entry on the (non-admin) course page, but have some form of indication that the VoD is private. Alternatively, the VoD should not even appear for them, too.

Desktop (please complete the following information):