- 🇺🇸United States smustgrave
With D7 approaching EOL soon I've started the process of triaging the D7queue here. Since there hasn't been any movement on this going to close out.
We would like to display the anonymous users' quiz result after they finish the quiz. The issue we are encountering is that when an anonymous user goes to view their results they are seeing of the anonymous users quiz results (since the /user/0/quiz-results page filters by uid and there are multiple quizzes under the uid of "0", same for /node/{quiz-node-id}/quiz-results).
Removing the permission "View own quiz results " for "anonymous user" is not an option, because this will also disable the ability to show the last result. But maybe it is half way to solve the problem, just show the result of the last quiz, the anonymous user has taken and disable the possibility to guess other result IDs. This might be achieved by using a hash in the URL, like /node/{quiz-node-id}/quiz-results/{hash}.
Another option might be in the Quiz settings under "Multiple takes" to set "Store results" to "The newest". But there will be in information disclosure, at least for the last, so this is still not good. And I am not sure about the edge case on hight traffic whether the anonymous user will see it's own result or one of another anonymous user submitted slightly after the result will be returned.
Closed: outdated
5.0
Code - Quiz core
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
With D7 approaching EOL soon I've started the process of triaging the D7queue here. Since there hasn't been any movement on this going to close out.