okpy / ok

ok.py supports programming projects by running tests, tracking progress, and assisting in debugging.
Apache License 2.0
333 stars 84 forks source link

Modify edit student form to allow email editing #1351

Closed ja5087 closed 5 years ago

ja5087 commented 5 years ago

fixes #1229

I've enabled the ability to edit emails from within the "Edit Student Form" within each course's enrollment page. Since email and name are shared between all courses (and perhaps SID should be too), this change is reflected across every single course the student is enrolled in.

pbitutsky commented 5 years ago

Problem: Malicious users can enroll an admin into their class and change the admin's email. By doing that, the admin will not be able to log in to their okpy account.

Please make it so that users cannot change admin's emails.