cancel
Showing results for 
Search instead for 
Did you mean: 
ptart
Explorer III

Commons: Why can sub-account admins manage root account objects shared in Commons?

Jump to solution

Shouldn't root admins be the only ones who can manage shared resources at the root account, with the exception with the one shared the resource?

In our sub-account structure, we have sub-account admins so they can manage courses and users at their school level. Because they have admin permissions, even though it is at the sub-account level, these users have full access to manage ALL of the Commons content in the (1) root level (our district) and (2) their sub-account level. That does not make sense to me.

For example

  •      Root Account (1) - root admin is Tod.
    • Sub-account (1A) - admin is Bill
    • Sub-account (1B) - admin is Sue
    • Sub-account (1C) - admin is Fred

Scenarios

  1. Good - A random teacher posts an item to commons at school 1A. Only Bill, Tod, and the random teacher can manage that resource (edit or delete).
  2. Bad - A random teacher posts an item to commons at school 1 (root account). Tod, Bill, Sue, and Fred all have access to manage that resource (edit  or delete).
1 Solution

Accepted Solutions
avanwagoner
Community Member

Hey  @ptart ,

This is due to an unfortunate limitation in LTI. As Commons is launched as an LTI tool, rather than being a built-in part of Canvas, and LTI only has a role for admin and does not distinguish between root and sub-accounts, Commons can't tell the two apart. We are exploring ways to work around this limitation, without sacrificing the work toward interoperability of Commons with other LMSs. We should hopefully have good news for you soon.

View solution in original post

3 Replies
chofer
Community Coach
Community Coach

Hello  @ptart ​...

I am not sure of an answer for you, but I am going to share your question with people from Instructure who can answer your question as it relates to Commons.  Hopefully you will receive a response in the very near future.  Hope this helps!!!

kblack
Community Member

 @ptart ​, please share with the Community when you get an answer.  I'm interested in the same thing before we launch Commons over the winter break.

avanwagoner
Community Member

Hey  @ptart ,

This is due to an unfortunate limitation in LTI. As Commons is launched as an LTI tool, rather than being a built-in part of Canvas, and LTI only has a role for admin and does not distinguish between root and sub-accounts, Commons can't tell the two apart. We are exploring ways to work around this limitation, without sacrificing the work toward interoperability of Commons with other LMSs. We should hopefully have good news for you soon.

View solution in original post