Student Activity Guide can be Completed by Someone Other than to Whom it was Assigned (Doc ID 2152094.1)

Last updated on JULY 10, 2023

Applies to:

Symptoms

ACTUAL BEHAVIOR
------------------------
Activity Guides can be completed by someone other than person to whom it is assigned.

Activity Guides are assigned to the students; however, users who view the To Do List on Student Services Center or Adviser Center and who also have the student role view their own data within the activity guide instead of the student of focus.

If that same user completes the activity guide (updating their own personal data, not that of the student), it marks the student's activity guide as complete and releases the student's registration hold.

EXPECTED BEHAVIOR
-----------------------
Expect the activity guide to only be completed by the person to whom it is assigned.

STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Assign an activity guide to a student.
2. Have an operator who is also a student go into the student center for the person who has the activity guide.
3. Click on the to do list for that student.
4. Complete the activity guide, but fill in the operator's info.

BUSINESS IMPACT
-----------------------
The issue has the following business impact:
Due to this issue, other users can complete the activity guide for another student.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.