Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
86 changes: 39 additions & 47 deletions components/ILIAS/TestQuestionPool/PRIVACY.md
Original file line number Diff line number Diff line change
@@ -1,50 +1,42 @@
## TestQuestionPool Privacy
Insert caveat: *This documentation does not warrant completeness or correctness.
Please report any missing or wrong information using the ILIAS issue tracker.*
# TestQuestionPool Privacy

### Note:
The module TestQuestionPool and the module Test are still tied together in most intricate ways. The primary
component of concern in regards to privacy related evaluations is the Test. As the lines between these components
are blurred - which makes them subject for refactoring, too - it is advised to never look at only one of the components
but always at both.
> **Disclaimer: This documentation does not guarantee completeness or accuracy. Please report any missing or incorrect information via [Pull Request](docs/development/contributing.md#pull-request-to-the-repositories).**

## General information

The module TestQuestionPool and the module Test are still tied together in most intricate ways. The primary component of concern in regards to privacy related evaluations is the Test. As the lines between these components are blurred, it is advised to never look at only one of the components but always at both.

## Integrated components

The TestQuestionPool component employs the following services, please consult the respective privacy.mds.

- [AccessControl](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/AccessControl/PRIVACY.md): Is used for permission handling and is able to present personal data.
- [COPage](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/COPage/PRIVACY.md): Is used for content creation/presentation and is able to store, present and delete personal data.
- Export: Is used for export creation and is able to export personal data.
- [InfoScreen](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/InfoScreen/PRIVACY.md): Is used as in any repository object and is able to present personal data.
- [Metadata](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/MetaData/Privacy.md): Stores the full name of the author of the test.
- [Notes](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Notes/Privacy.md): Is used to create, edit and present comments for questions and the question pool.
- [Object](https://github.com/ILIAS-eLearning/ILIAS/tree/trunk/components/ILIAS/ILIASObject): Stores the account which created the object as it's owner and creation and update timestamps for the object.
- [Skill (Competence) Service](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Skill/PRIVACY.md)
- [Taxonomy](https://github.com/ILIAS-eLearning/ILIAS/blob/trunk/components/ILIAS/Taxonomy/PRIVACY.md)
- [Test](tbd)

## Data being stored
- **Authorship of Questions**:
Authors of questions are stored in the TestQuestionPool as reference to the users id.
The data is required for copyright purposes as well as to enable communication with the author.

- **Ownership of Questions**:
Owners of questions are stored in the TestQuestionPool as reference to the users id.
The data is required to manage detailed access and permissions on usage and editing of the question.

- The TestQuestions Pool component employs the following services, please consult the respective privacy.mds: [Skill](../../ILIAS/Skill/PRIVACY.md), [Metadata](../../ILIAS/MetaData/Privacy.md), [AccessControl](../../ILIAS/AccessControl/PRIVACY.md)


## Data being presented
- **Authorship of Questions**:
The authors of questions are revealed in editing forms of questions as well as tabular
overviews to accounts with the edit permission to the test question pool object.
- **Ownership of Questions**:
The owners of questions are revealed in editing forms of questions as well as tabular
- overviews to accounts with the edit permission to the test question pool object.

## Data being deleted
- **Authorship of Questions**:
The storage of this information is tied to the lifecycle of the question it is attached
to and so the deletion happens in the removal of a question by a user account with edit permissions to the question
pool the questions resides in.
- **Ownership of Questions**:
The storage of this information is tied to the lifecycle of the question it is attached
to and so the deletion happens in the removal of a question by a user account with edit permissions to the question
pool the questions resides in.


## Data being exported
- **Authorship of Questions**:
Authorship of questions is exported with the questions. In the test question pool, this is the case when questions or
the pool as a whole is exported by account with edit permissions on the test question pool object.
In the test object, questions can be exported by accounts with edit permission in the context of the test.
- **Ownership of Questions**:
Ownership of questions is exported with the questions. In the test question pool, this is the case when questions or
the pool as a whole is exported by account with edit permissions on the test question pool object.
In the test object, questions can be exported by accounts with edit permission in the context of the test.

- At the creation process of questions the field 'Author' is prefilled with the full name of the user, which is creating the question. If this value is not changed, the name of the user is stored.
- At the editing of questions the field 'Author' contains the previous saved value. If the value is changed and personal data is entered, it will be stored.
- Ownership of Questions: Owners of questions are stored in the TestQuestionPool as reference to the 'User ID'. The data is required to manage detailed access and permissions on usage and editing of the question.

## Data being presented

- At the overview of the questions of a question pool, the values of the field 'Author' for all questions are shown, which may contain personal data.
- At the 'Statistics' of a question, the 'Author' of tests is displayed at the table 'This question is used in the following tests', if the question is used in tests. This information originates from the metadata service (see above).

## Data being deleted

It is possible to delete questions. Within this the personal data at the field 'Author' and the ownership of the question is deleted.

## Data being exported

- The XML export of the question pool contains the personal data 'Author' of the questions and of the question pool itself within the metadata.
- It's purpose is to being imported in ILIAS again, although the contained personal data is easily accesible.
Loading