Student based roles can be given the "course analytics - view pages" permission to view unposted grades

Canvas

This behavior has been resolved and deployed to the production environment as of 3/26/25.

Description

When a student has Analytics permissions enabled, grades that have not been posted in the grade book can be viewed in course analytics.

Expected Behavior

  • Unposted scores should not show in Analytics for students.

  • Alternately: Student based roles should not be given the ability to have this permission turned on at all.

Workaround

Disable Analytics permission for students.

Steps to Reproduce

Prerequisite: Analytics permission should be enabled for student role.

  1. Create a course and enroll at lease 1 student.

  2. Set the grade posting policy to manual and create at lease 1 assignment.

  3. Submit the assignment as the student and grade the submission. (Do not post grades)

  4. Allow 24 hours to pass for course analytics to generate.

  5. Acting as the student navigate to grades and note that all grades are hidden.

  6. Acting as the student navigate to Analytics and note that grades hidden in gradebook are visible in Analytics.

Additional Info

OREO-4141

Known issues indicate notable behaviors that have been escalated to the Canvas engineering team. Known issues are not a guarantee for an immediate resolution. This document is for informational purposes only and does not replace the Support process. If you are encountering the behavior outlined in this document, please ensure you have submitted a Support case (per your institution's escalation process) so Canvas Support can adequately gauge the overall customer impact and prioritize appropriately.

Labels (1)