A Canvas subaccount administrator who should NOT have had permissions to install tools to other subaccounts, successfully but unintentionally installed EvaluationKit evaluation software to all account system-wide.
This has been reported to the vendor as a bug.
Remediation:
We will first re-attempt on test:
1. Confirm evalkit is not installed on uth.test
(DONE, see email 3/30/15, 1:40 PM GEO)
2. Get guidance from the vendor on how
to install evalkit in ONE subaccount
only (DONE, see email March 30, 2015 2:31 PM Emin)
3. After following those
instructions, confirm that evalkit is only appearing in that subaccount. (DONE,
see email Mon 3/30/2015 2:48 PM GEO)
4. Document (that’s what we're doing this
afternoon)
Production Remediation:
1. Remove system-wide installation
2. Confirm evalkit is absent from all subaccounts on on production
3. Follow documentation created above (step 4) to install correctly in production.
Documentation:
To install EvalKit in a subaccount:
1. Go to http://uth-tmc.evaluationkit.com, account, integration settings, LTI. Get Consumer Key, Shared Secret, and URL
2. Go to Canvas, subaccount, settings, apps, view app configurations, add app
3. Config type = manual
Paste consumer key, shared secret, url; name = EvaluationKit; privacy = public
4. Save. Tool will be available to that subaccount's courses only.
No comments:
Post a Comment