Exam mode - disallow access to courses where you are manager
Bug report:
Submitted by Max on 22 May 2025 at 16:58I think I accidentally discovered a minor overlook in WebLab exam mode. While your exam ticket is valid (“You are in an exam!” message shows if you want to access something not from the exam), you cannot access other assignments from the course (or assignments from other courses). However, it is possible to access assignments from courses where you’re a staff member or a TA, by just providing the assignment ID, view your code in those, and even upload and run new code. The implications are that someone who’s a TA could potentially abuse it by storing notes or other illegal materials in a submission for a course they’re TAing and then access those during their own exam.