Bug 50968 - [4.3] No share access on a teachers pc after a finished exam
[4.3] No share access on a teachers pc after a finished exam
Status: CLOSED FIXED
Product: UCS@school
Classification: Unclassified
Component: UMC - Exam mode
UCS@school 4.4
Other Linux
: P5 normal (vote)
: UCS@school 4.3 v9-errata
Assigned To: Ole Schwiegert
Tobias Wenzel
:
Depends on: 50852
Blocks:
  Show dependency treegraph
 
Reported: 2020-03-16 09:57 CET by Ole Schwiegert
Modified: 2020-04-20 16:02 CEST (History)
9 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 5: Major Usability: Impairs usability in key scenarios
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 5: Blocking further progress on the daily work
User Pain: 0.286
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2020020621000159, 2020021721000307
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Ole Schwiegert univentionstaff 2020-03-16 09:57:08 CET
+++ This bug was initially created as a clone of Bug #50852 +++
Handles the backport for 4.3

The customer has a problem with the share access on a teachers pc, after an exam is finished.
After the end of the exam, shares are no longer accessible to anyone except MyFiles. This state remains unchanged even after a restart and different logins.

Remedy so that subsequent instruction with access to all shares is possible.
Simplest scenario: Log on to the teacher's workstation with a student account. Then log on to the UCS WebFrontEnd with a teacher account and start a test class and finish it immediately. All shares are immediately available.

Computer login teacher, UCS login teacher = share problems
Computer login student, UCS login teacher = Everything o.k.

Under ucs@school and computer room the logged in teacher cannot change any shares of a computer if the login behaviour is the same. Under student login this is no problem.

Additionally:
The IP address of the teacher's computer is entered into the UCR - 
samba/othershares/hosts/deny and 
samba/share/Marketplace/hosts/deny 
with the IP addresses of the student computers, but when the exam is finished, only the IP addresses of the student computers are logged out, the IP address of the teacher computer remains.

Unfortunately I could not reproduce this in my testenvironment.
But I could see, that the teachers pc was also listed in the computerroom like the students pc's. And the IP address of the teachers pc is set in the mentioned ucr variables as well, but after finishing the exam, the variables are completely cleared.
Comment 1 Ole Schwiegert univentionstaff 2020-04-14 08:53:57 CEST
Package: ucs-school-umc-computerroom
Version: 10.0.2-7A~4.3.0.202004140851
Branch: ucs_4.3-0
Scope: ucs-school-4.3

Since this version of ucs@school does not support dedicated teacher computers yet, the patch originally proposed by Jürn in Bug #50852 was applied.

This means whenever the settings of a computer room are changed, first all computers, including these where teachers are logged in, are reset.
Comment 2 Tobias Wenzel univentionstaff 2020-04-15 13:55:18 CEST
QA -> all OK

[4.3] b1dcb40fd Bug #50968: Add advisory
[4.3] 2c877b2df Bug #50968: Reset all computers in change_setting method


Code and YAML -> looks good.

ucsschool 4.3 v9 with two windows 10 clients.

Tested with steps decribed in https://forge.univention.org/bugzilla/show_bug.cgi?id=50852#c9

Before the patch, computer A was not removed from the ucrv "samba/share/Marktplatz/hosts/deny".

After applying the patch, none of the computers in question remained in the ucrv. This was the expected behavior.
Comment 3 Daniel Tröder univentionstaff 2020-04-20 16:02:40 CEST
Released as an errata update to ucsschool 4.3 v9.

https://docs.software-univention.de/changelog-ucsschool-4.3v9-de.html#changelog:ucsschool:2020-04-20