You are not authorized to access this page

We have encountered this issue when quiz takers use the browser back button to go back from the review page to the question page. Feedback from Client: This is allowed behaviour in other quiz systems they use, like H5P, so a natural behaviour for their users.

We were hoping for an easy fix, like using the Javascript beforeunload event to tell the user their quiz results would be lost if they left the page. Unfortunately, a security feature named Sticky Activation means it won't work in this use case. Though the quiz taker has viewed the quiz results page, they typically haven't interacted with it, so the event won't fire.

I think to resolve this, the following would be required:

1. Update QuizQuestionController to allow access on any question in an active quiz
2. Update QuizQuestionAnsweringForm to detect if taker is not on the current question, provide a message, and provide a button to take them to the correct question

Thoughts?