Community

ldoughty · ‎01-31-2018

What is the scope of the added protection? Will this also block the JavaScript admins upload, or does this only apply to content created 'on the fly', so to speak, in various text fields that students and teachers have access to?

ldoughty · ‎12-21-2017

We did not really find a "solution"... We created an AWS account, and put our JS code there. If someone script-blocks amazonaws.com, canvas itself breaks wonderfully and without notice (can't upload files -- it fails/hangs without notice, can't view some pages -- they show a white screen that looks like it finished loading a page, but there's no content or failure notice)... So we leverage the hope someone notices there's an issue and eventually white-lists the domain to get our own JS in. That said, this is a terrible work-around that requires us to serve our JS out of AWS, and still counts on the user realizing their script blocker is causing problems. We put in a feature/change request to add a notice about script blockers, but that didn't get enough votes (admins don't really get a lot of love). It would have been ideal if Canvas could detect a script blocker when the students first visit the canvas home page / dashboard, and let us input a custom block of text (such as an explanation of the problem and a link to our help desk articles listing all the domains to white-list). Or at least mention that they have script blockers that are preventing core features from working (like uploading assignments, and using LTI's)

ldoughty · ‎06-22-2017

While this is a good article, it's off the mark for this question. This article covers user account creation, but not course enrollments. This might help you identify who created this student account, but that would only be helpful if this is the very first encounter with your institution for this student, and that teacher created the students account as a byproduct of adding the student to their first canvas course. My understanding of this question is more about detecting who added a student to a course which, in 95% of cases, probably, would not fall into this category (existing student or SIS imported student). Garth's reply thread has good info on trying to identify who did the addition, but the short answer is basically: "There's no system-tracked property, you must infer this from looking at page views of who can add students in this course, based on your roles permissions (typically teachers and/or TA's)"

ldoughty · ‎01-05-2017

This isn't really my area of comfort.. but I figured I'd mention you're likely to get more help if you can describe your setup, what libraries (if any) you're using, and otherwise describe what's not working... from this description it's not clear if you have a web server issue, oauth/lti issue, php issue, or canvas configuration problem. It traverses what some people might consider two or three different skill sets or types of administrators.

ldoughty · ‎01-05-2017

I was curious if any other admins have looked into this and found a solution to detect when a user has script blockers enabled. Looking at the page code, it seems all the JS code is hosted by cloudfront.net, as well as amazonaws.com. However, Canvas appears to users to run "acceptably" without any of this code. In reality, however, this is not the case. The blocked code has lead to some of our users reporting bugs, putting in tickets, or students failing assignments because their script blockers are not allowing normal behavior. A good specific example is SafeScript and "File upload" assignments. With SafeScript enabled, file uploads fail (with no prompt of success nor failure) if instructure-uploads.s3.amazonaws.com is not white-listed. We also have a vendor who asks us to load a JS file to integrate with Canvas; with script blockers enabled, their extension (which adds a menu item in certain screens) never loads. Our policy thus far has been to educate users, and let teachers decide to accept late work. But we're at ~8+ third-parties now that students need to white-list (and growing with nearly every LTI tool). A not-insignificant number of our tickets are simply script blocker issues. I'd love to hear what you all have tried to combat this. I'm really hoping someone has found a way to detect the script blockers and prompt users what to white-list if a JS file fails to load.

ldoughty · ‎07-20-2016

I wouldn't say I'm organizing anything... just heard something and wanted people to know about it early in case it helps! I don't know where we can actually play... nor do I, myself, have any games here 😞

ldoughty · ‎07-19-2016

I heard rumors we're looking to gather for an unofficial game night wednesday and thursday! For Wednesday's "Unofficial Game Night #1" it looks like people were thinking of meeting outside the Columbine Ballroom (the room where all keynotes are held). I've also heard some people mention meeting again elsewhere... would love to know what you all are hearing... I think 8-8:30 might be a good time to start... if we meet at columbine, we might need to relocate. I hope someone brings CAH or an apples-to-apples like game! (and that there's a nearby bar!)

ldoughty · ‎07-13-2016

So many games! I'm sad this is only one night! I would love to play Cards Against Humanity, Exploding Kittens, Pandemic, Revolution (if anyone has that?)... We should make a 2nd night, in my humble opinion! How can I hit even half of these awesome games!? Edit: And Munchkin! How did I not mention Munchkin? Also.. Fluxx... That's an easy game... the rules are on the cards!

ldoughty · ‎07-13-2016

I'd love to try this game.. I actually have a copy, but so few people play these kinds of games (that I'm aware of) around me! NSFW or not, it's after-hours IMO 🙂

ldoughty · ‎12-11-2015

Apparently, there's a grading scheme with ID "0" that exists in the system. This scheme: Has no name Is not accessible in grading API calls (but is identified by ID number in courses API) Is not shown on any Admin screens Is not available in canvas data exports Is not editable by any means The only way we identified this exists was because we couldn't figure out which scale the system was using for some courses that returned an ID of "0" as their grading scheme. We assumed "0" was a placeholder for "default" until one of the developers noticed there was a scale hidden in plain sight to teachers... For admins without courses: create a sandbox course, go to "Settings" for the course, check the check box to "enable course grading scheme", then click the "Set a scheme" link. The scale that appears is actually the "hidden scheme"... In plain sight. (Note: I've read some people say ID "1" is the default, but our university deleted ID 1 at some point during initial setup and our standard scheme was input as ID 2) If you click "select another scheme" (or manage schemes), this hidden scheme is not listed as a choice. If you pick a new scheme, you can not get back to this hidden scheme unless you un-check and re-check the "enable course grading scheme" check box. We're going to fix this by API calls for future semesters. Hopefully other admins/schools will find this useful...

ldoughty · ‎12-09-2015

Thanks for this info Shane From this, I was able to identify the ID's of the schemes we have: "id":2, "title":"Letter Grades w/ +/-" "id":41,"title":"Letter Grades w/ +/- (Specific Dept.)" (current default) [some others, but none ID 1] So without a '1', the default is going to be the most recently created grading scheme it seems. If you could e-mail me that script, it would be helpful. While I'm not sure if our development team uses Perl, I'm sure they can read, understand, and re-write in a language they prefer if needed. Edit: Found a secret bonus level (scheme)! Will post separately.

ldoughty · ‎12-08-2015

Hello everyone, I'm a new Canvas Admin for my university, and I'm trying to find an answer that doesn't seem to be available online anywhere. Help would be appreciated. We have 4 "Grading Schemes" on the account level set up. When an instructor sets up their course, they click the checkbox: "Enable course grading scheme" and some move on without clicking the "set a grading scheme" link that appears. This leads to these courses having a default grading scheme that is not the institution standard. However, we can find no way to "set" the institution standard, nor any documentation on how it determines this default value. As you can guess, this has lead to a lot of trouble for us as we're coming up on grade export time and we did not realize this problem until now... So I have 2 questions: 1) What is the "Default Grading Scheme" -- as in, how does canvas decide which one is the 4 schemes we have in place is the default if the user makes no scheme selection? I thought, at first, that it might be the one that can't be edited, but that's not the case. 2) Is the API calling the only non-manual way to resolve this across the entire institution? I see setting an account-level default was proposed in the past as an enhancement: This seems to be the exact thing I was hoping to find, but looks like that proposal didn't make it. Thanks for any guidance you all can provide. -Lee

Posts	12
Solutions	0
Kudos given	5
Kudos received	43
Member Since	‎12-08-2015

Community

Have a Canvas Question?

Have a Mastery Question?

Have an Elevate Question?

Have an Impact Question?

Re: Proposal for New Security Policy

Re: Detecting uBlock, SafeScript, etc.

Re: Who added a student to a course

Re: LTI integeration with Canvas-Php

Detecting uBlock, SafeScript, etc.

Re: Game Night (instcon16)

Re: Game Night (instcon16)

Re: Game Night (instcon16)

Re: Game Night (instcon16)

Re: Account-level Default grading scheme (& determ...

Re: Account-level Default grading scheme (& determ...

Account-level Default grading scheme (& determinat...