frappe / lms

Easy to Use, 100% Open Source Learning Management System
https://frappe.io/learning
GNU Affero General Public License v3.0
1.06k stars 480 forks source link

LMS Student has way too much access. #1061

Open ajiragroup opened 1 month ago

ajiragroup commented 1 month ago

I added social login to LMS.

I logged in via a new email (via social login). The user was automatically assigned LMS Student role.

But then the LMS student was able to access almost all desk pages with some restrictions.

The user could even see all users list.

I realized that roles was ok but all modules were allowed for the user. image

It would be impossible to manually remove all modules not required for all LMS students user especially when there are 100's of user.

image