Information on Security Updates for Public Pages in Exam

‍As part of our efforts to enhance product security, both against intrusions and from a GDPR perspective, we are now implementing changes to the public student schedule.

In summary, we removed all irrelevant information from the page and display only what is necessary for the student. We have also update when the page is available for students.

As an administrator, these changes will include new settings for the public student page:

‍

1. You can now choose whether to activate or deactivate the public page.
2. You can set when the page will be available to students.

Regarding point 2, you can specify the number of days before an exam when the public page should be visible. For instance, if you want the page to be available only 14 days before an exam, enter 14 days in the settings. This will prevent students from accessing the page before or after this period, and they will see an error message explaining the reason.

If the value is set to zero (which is the default), there is no time restriction on when a published exam can be displayed to students.

As a logged-in administrator or organizer, you will always have access to the page to verify its contents.

We have also removed the public APIs used in Exam and replaced them with the existing private APIs that require access tokens.

‍

Bug Fixes

Fixed a bug where room showed as available in Exam even though they were booked in Core if the reservation had other status than Complete.