Hi everyone,
If course completions are ever reset in a course, a new menu item called Certificate Archive becomes visible to learners under the Administration block. Within this archive, learners can view their certificate history – but also the certificates earned by other users in the same course.
From a GDPR perspective, this is problematic, as learners should never have access to other users’ personal achievement data.
While it is possible to hide the Administration block so learners don’t see the Certificate Archive submenu, this is not a real solution. If a learner knows or obtains the direct URL to the report, they can still access it and view other users’ certificates.
My questions are:
Is there any way to remove the capability that allows the Learner role to view other users’ certificates in the Certificate Archive, but still access their own?
Is it possible to configure or override this report’s permissions somewhere?
I’ve searched thoroughly under the regular Site Administration permissions and reports, but wasn’t able to find anything that controls access to this specific report.
Any guidance or experience with this issue would be greatly appreciated.
Thanks a lot!
All the best,
Monica.