+
+
+ {{^categories}}
+
diff --git a/admin/tool/dataprivacy/templates/contact_dpo.mustache b/admin/tool/dataprivacy/templates/contact_dpo.mustache
new file mode 100644
index 00000000000..886bf45b1db
--- /dev/null
+++ b/admin/tool/dataprivacy/templates/contact_dpo.mustache
@@ -0,0 +1,58 @@
+{{!
+ This file is part of Moodle - http://moodle.org/
+
+ Moodle is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ Moodle is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with Moodle. If not, see {{#str}}categories, tool_dataprivacy{{/str}}
+
+
+
+ | {{#str}}name{{/str}} | +{{#str}}description{{/str}} | +{{#str}}actions{{/str}} | +
|---|---|---|
| {{{name}}} | +{{{description}}} | ++ {{#actions}} + {{> core/action_menu}} + {{/actions}} + | +
+ {{#str}}nocategories, tool_dataprivacy{{/str}} +
+ {{/categories}} +
+
+
diff --git a/admin/tool/dataprivacy/templates/context_tree_branches.mustache b/admin/tool/dataprivacy/templates/context_tree_branches.mustache
new file mode 100644
index 00000000000..f30c470bd67
--- /dev/null
+++ b/admin/tool/dataprivacy/templates/context_tree_branches.mustache
@@ -0,0 +1,38 @@
+{{!
+ This file is part of Moodle - http://moodle.org/
+
+ Moodle is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ Moodle is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with Moodle. If not, see
+
+
+ {{replytoemail}}
+
+
+
+
+
+
+
+ {{#str}}required, moodle{{/str}}
+
+ | Name | Information | Purpose | Category | Retention period | ExpirySort by Expiry Ascending | |
|---|---|---|---|---|---|---|
| Miscellaneous / TC 1 | 7 children | Default purpose | Default category | 1 days | Thursday, 5 April 2018, 10:29 AM |
+
+{{#js}}
+// Initialise the JS.
+require(['tool_dataprivacy/data_deletion'], function(DataDeletion) {
+ new DataDeletion();
+});
+{{/js}}
diff --git a/admin/tool/dataprivacy/templates/data_registry.mustache b/admin/tool/dataprivacy/templates/data_registry.mustache
new file mode 100644
index 00000000000..203510bbe8c
--- /dev/null
+++ b/admin/tool/dataprivacy/templates/data_registry.mustache
@@ -0,0 +1,61 @@
+{{!
+ This file is part of Moodle - http://moodle.org/
+
+ Moodle is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ Moodle is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more comments.
+
+ You should have received a copy of the GNU General Public License
+ along with Moodle. If not, see
+
+
+ {{#str}}datadeletionpagehelp, tool_dataprivacy{{/str}}
+
+
+ {{#filter}}
+ {{> core/single_select}}
+ {{/filter}}
+
+ {{#existingcontexts}}
+
+
+
+ {{/existingcontexts}}
+
+ {{{expiredcontexts}}}
+
+
+ {{#existingcontexts}}
+
+
+
+
+ {{/existingcontexts}}
+
+
diff --git a/admin/tool/dataprivacy/templates/data_request_email.mustache b/admin/tool/dataprivacy/templates/data_request_email.mustache
new file mode 100644
index 00000000000..8875b6cb1a3
--- /dev/null
+++ b/admin/tool/dataprivacy/templates/data_request_email.mustache
@@ -0,0 +1,105 @@
+{{!
+ This file is part of Moodle - http://moodle.org/
+
+ Moodle is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ Moodle is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with Moodle. If not, see
+ {{#defaultsbutton}}
+ {{> core/action_link}}
+ {{/defaultsbutton}}
+ {{#actions}}
+ {{> core/action_menu}}
+ {{/actions}}
+
+ {{#nosystemdefaults}}
+
+ {{> core/notification_warning}}
+
+ {{/nosystemdefaults}}
+
+
+
+
+
+
+ {{#tree}}
+ {{> tool_dataprivacy/context_tree_node}}
+ {{/tree}}
+
+
+
+ I would like to request a copy of my son's user data. Thanks!", + "forself": true, + "datarequestsurl": "#" + } +}} + +
+
+
+
+ {{#str}}viewrequest, tool_dataprivacy{{/str}} +
diff --git a/admin/tool/dataprivacy/templates/data_request_modal.mustache b/admin/tool/dataprivacy/templates/data_request_modal.mustache
new file mode 100644
index 00000000000..b61bce1e99d
--- /dev/null
+++ b/admin/tool/dataprivacy/templates/data_request_modal.mustache
@@ -0,0 +1,40 @@
+{{!
+ This file is part of Moodle - http://moodle.org/
+
+ Moodle is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ Moodle is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more comments.
+
+ You should have received a copy of the GNU General Public License
+ along with Moodle. If not, see {{#str}}emailsalutation, tool_dataprivacy, {{dponame}}{{/str}}
+{{#str}}requestemailintro, tool_dataprivacy{{/str}}
+| + {{#str}}requesttype, tool_dataprivacy{{/str}} + | ++ {{requesttype}} + | +
|---|---|
| + {{#str}}requestfor, tool_dataprivacy{{/str}} + | ++ {{requestfor}} + | +
| + {{#str}}requestby, tool_dataprivacy{{/str}} + | ++ {{requestedby}} + | +
| + {{#str}}requestcomments, tool_dataprivacy{{/str}} + | ++ {{{requestcomments}}} + | +
| + {{#str}}daterequested, tool_dataprivacy{{/str}} + | ++ {{requestdate}} + | +
+ {{#str}}viewrequest, tool_dataprivacy{{/str}} +
+
diff --git a/admin/tool/dataprivacy/templates/data_requests.mustache b/admin/tool/dataprivacy/templates/data_requests.mustache
new file mode 100644
index 00000000000..db2f2ae7a5d
--- /dev/null
+++ b/admin/tool/dataprivacy/templates/data_requests.mustache
@@ -0,0 +1,152 @@
+{{!
+ This file is part of Moodle - http://moodle.org/
+
+ Moodle is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ Moodle is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more comments.
+
+ You should have received a copy of the GNU General Public License
+ along with Moodle. If not, see {{#str}}emailsalutation, tool_dataprivacy, {{username}}{{/str}}
+{{message}}
+{{#downloadlink}}{{> core/action_link}}{{/downloadlink}}
+
+
+
+
+
+
+
+{{#js}}
+// Initialise the JS.
+require(['tool_dataprivacy/requestactions'], function(ActionsMod) {
+ new ActionsMod();
+});
+{{/js}}
diff --git a/admin/tool/dataprivacy/templates/form-user-selector-suggestion.mustache b/admin/tool/dataprivacy/templates/form-user-selector-suggestion.mustache
new file mode 100644
index 00000000000..759650c4c9a
--- /dev/null
+++ b/admin/tool/dataprivacy/templates/form-user-selector-suggestion.mustache
@@ -0,0 +1,41 @@
+{{!
+ This file is part of Moodle - http://moodle.org/
+
+ Moodle is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ Moodle is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with Moodle. If not, see | {{#str}}requesttype, tool_dataprivacy{{/str}} | +{{#str}}user, tool_dataprivacy{{/str}} | +{{#str}}daterequested, tool_dataprivacy{{/str}} | +{{#str}}requeststatus, tool_dataprivacy{{/str}} | +{{#str}}message, tool_dataprivacy{{/str}} | +|
|---|---|---|---|---|---|
| {{typenameshort}} | +{{foruser.fullname}} | +{{#userdate}} {{timecreated}}, {{#str}} strftimedate {{/str}} {{/userdate}} | ++ {{statuslabel}} + | +{{#shortentext}}60, {{comments}}{{/shortentext}} | ++ {{#actions}} + {{> core/action_menu}} + {{/actions}} + | +
| + {{#str}}nodatarequests, tool_dataprivacy{{/str}} + | +|||||
+
+
+
+
+
+
+{{#js}}
+// Initialise the JS.
+require(['tool_dataprivacy/myrequestactions'], function(ActionsMod) {
+ ActionsMod.init();
+});
+{{/js}}
diff --git a/admin/tool/dataprivacy/templates/purposes.mustache b/admin/tool/dataprivacy/templates/purposes.mustache
new file mode 100644
index 00000000000..f8e675fa422
--- /dev/null
+++ b/admin/tool/dataprivacy/templates/purposes.mustache
@@ -0,0 +1,106 @@
+{{!
+ This file is part of Moodle - http://moodle.org/
+
+ Moodle is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ Moodle is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with Moodle. If not, see | {{#str}}requesttype, tool_dataprivacy{{/str}} | +{{#str}}daterequested, tool_dataprivacy{{/str}} | +{{#str}}requeststatus, tool_dataprivacy{{/str}} | +{{#str}}message, tool_dataprivacy{{/str}} | +|
|---|---|---|---|---|
| {{typename}} | +{{#userdate}} {{timecreated}}, {{#str}} strftimedate {{/str}} {{/userdate}} | ++ {{statuslabel}} + | +{{comments}} | ++ {{#actions}} + {{> core/action_menu}} + {{/actions}} + | +
| + {{#str}}nopersonaldatarequests, tool_dataprivacy{{/str}} + | +||||
+
+
+ {{^purposes}}
+
diff --git a/admin/tool/dataprivacy/templates/request_details.mustache b/admin/tool/dataprivacy/templates/request_details.mustache
new file mode 100644
index 00000000000..6f00e12a950
--- /dev/null
+++ b/admin/tool/dataprivacy/templates/request_details.mustache
@@ -0,0 +1,85 @@
+{{!
+ This file is part of Moodle - http://moodle.org/
+
+ Moodle is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ Moodle is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more comments.
+
+ You should have received a copy of the GNU General Public License
+ along with Moodle. If not, see {{#str}}purposes, tool_dataprivacy{{/str}}
+
+
+
+ | {{#str}}name{{/str}} | +{{#str}}description{{/str}} | +{{#str}}retentionperiod, tool_dataprivacy{{/str}} | +{{#str}}protected, tool_dataprivacy{{/str}} | +{{#str}}actions{{/str}} | +
|---|---|---|---|---|
| {{{name}}} | +{{{description}}} | +{{formattedretentionperiod}} | ++ {{#protected}} + {{#pix}}i/checked, core, {{#str}}yes{{/str}}{{/pix}} + {{/protected}} + {{^protected}} + {{#str}}no{{/str}} + {{/protected}} + | ++ {{#actions}} + {{> core/action_menu}} + {{/actions}} + | +
+ {{#str}}nopurposes, tool_dataprivacy{{/str}} +
+ {{/purposes}} +Hello,
I would like to download all of my personal data.
Thanks!
" + } +}} +
+
+
diff --git a/admin/tool/dataprivacy/tests/api_test.php b/admin/tool/dataprivacy/tests/api_test.php
new file mode 100644
index 00000000000..8f228889133
--- /dev/null
+++ b/admin/tool/dataprivacy/tests/api_test.php
@@ -0,0 +1,1060 @@
+.
+
+/**
+ * API tests.
+ *
+ * @package tool_dataprivacy
+ * @copyright 2018 Jun Pataleta
+ * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+
+use core\invalid_persistent_exception;
+use core\task\manager;
+use tool_dataprivacy\context_instance;
+use tool_dataprivacy\api;
+use tool_dataprivacy\data_registry;
+use tool_dataprivacy\expired_context;
+use tool_dataprivacy\data_request;
+use tool_dataprivacy\task\initiate_data_request_task;
+use tool_dataprivacy\task\process_data_request_task;
+
+defined('MOODLE_INTERNAL') || die();
+global $CFG;
+
+/**
+ * API tests.
+ *
+ * @package tool_dataprivacy
+ * @copyright 2018 Jun Pataleta
+ * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+class tool_dataprivacy_api_testcase extends advanced_testcase {
+
+ /**
+ * setUp.
+ */
+ public function setUp() {
+ $this->resetAfterTest();
+ }
+
+ /**
+ * Test for api::update_request_status().
+ */
+ public function test_update_request_status() {
+ $generator = new testing_data_generator();
+ $s1 = $generator->create_user();
+
+ // Create the sample data request.
+ $datarequest = api::create_data_request($s1->id, api::DATAREQUEST_TYPE_EXPORT);
+
+ $requestid = $datarequest->get('id');
+
+ // Update with a valid status.
+ $result = api::update_request_status($requestid, api::DATAREQUEST_STATUS_COMPLETE);
+ $this->assertTrue($result);
+
+ // Fetch the request record again.
+ $datarequest = new data_request($requestid);
+ $this->assertEquals(api::DATAREQUEST_STATUS_COMPLETE, $datarequest->get('status'));
+
+ // Update with an invalid status.
+ $this->expectException(invalid_persistent_exception::class);
+ api::update_request_status($requestid, -1);
+ }
+
+ /**
+ * Test for api::get_site_dpos() when there are no users with the DPO role.
+ */
+ public function test_get_site_dpos_no_dpos() {
+ $admin = get_admin();
+
+ $dpos = api::get_site_dpos();
+ $this->assertCount(1, $dpos);
+ $dpo = reset($dpos);
+ $this->assertEquals($admin->id, $dpo->id);
+ }
+
+ /**
+ * Test for api::get_site_dpos() when there are no users with the DPO role.
+ */
+ public function test_get_site_dpos() {
+ global $DB;
+ $generator = new testing_data_generator();
+ $u1 = $generator->create_user();
+ $u2 = $generator->create_user();
+
+ $context = context_system::instance();
+
+ // Give the manager role with the capability to manage data requests.
+ $managerroleid = $DB->get_field('role', 'id', array('shortname' => 'manager'));
+ assign_capability('tool/dataprivacy:managedatarequests', CAP_ALLOW, $managerroleid, $context->id, true);
+ // Assign u1 as a manager.
+ role_assign($managerroleid, $u1->id, $context->id);
+
+ // Give the editing teacher role with the capability to manage data requests.
+ $editingteacherroleid = $DB->get_field('role', 'id', array('shortname' => 'editingteacher'));
+ assign_capability('tool/dataprivacy:managedatarequests', CAP_ALLOW, $editingteacherroleid, $context->id, true);
+ // Assign u1 as an editing teacher as well.
+ role_assign($editingteacherroleid, $u1->id, $context->id);
+ // Assign u2 as an editing teacher.
+ role_assign($editingteacherroleid, $u2->id, $context->id);
+
+ // Only map the manager role to the DPO role.
+ set_config('dporoles', $managerroleid, 'tool_dataprivacy');
+
+ $dpos = api::get_site_dpos();
+ $this->assertCount(1, $dpos);
+ $dpo = reset($dpos);
+ $this->assertEquals($u1->id, $dpo->id);
+ }
+
+ /**
+ * Test for api::approve_data_request().
+ */
+ public function test_approve_data_request() {
+ global $DB;
+
+ $generator = new testing_data_generator();
+ $s1 = $generator->create_user();
+ $u1 = $generator->create_user();
+
+ $context = context_system::instance();
+
+ // Manager role.
+ $managerroleid = $DB->get_field('role', 'id', array('shortname' => 'manager'));
+ // Give the manager role with the capability to manage data requests.
+ assign_capability('tool/dataprivacy:managedatarequests', CAP_ALLOW, $managerroleid, $context->id, true);
+ // Assign u1 as a manager.
+ role_assign($managerroleid, $u1->id, $context->id);
+
+ // Map the manager role to the DPO role.
+ set_config('dporoles', $managerroleid, 'tool_dataprivacy');
+
+ // Create the sample data request.
+ $datarequest = api::create_data_request($s1->id, api::DATAREQUEST_TYPE_EXPORT);
+ $requestid = $datarequest->get('id');
+
+ // Make this ready for approval.
+ api::update_request_status($requestid, api::DATAREQUEST_STATUS_AWAITING_APPROVAL);
+
+ $this->setUser($u1);
+ $result = api::approve_data_request($requestid);
+ $this->assertTrue($result);
+ $datarequest = new data_request($requestid);
+ $this->assertEquals($u1->id, $datarequest->get('dpo'));
+ $this->assertEquals(api::DATAREQUEST_STATUS_APPROVED, $datarequest->get('status'));
+
+ // Test adhoc task creation.
+ $adhoctasks = manager::get_adhoc_tasks(process_data_request_task::class);
+ $this->assertCount(1, $adhoctasks);
+ }
+
+ /**
+ * Test for api::approve_data_request() with the request not yet waiting for approval.
+ */
+ public function test_approve_data_request_not_yet_ready() {
+ global $DB;
+
+ $generator = new testing_data_generator();
+ $s1 = $generator->create_user();
+ $u1 = $generator->create_user();
+
+ $context = context_system::instance();
+
+ // Manager role.
+ $managerroleid = $DB->get_field('role', 'id', array('shortname' => 'manager'));
+ // Give the manager role with the capability to manage data requests.
+ assign_capability('tool/dataprivacy:managedatarequests', CAP_ALLOW, $managerroleid, $context->id, true);
+ // Assign u1 as a manager.
+ role_assign($managerroleid, $u1->id, $context->id);
+
+ // Map the manager role to the DPO role.
+ set_config('dporoles', $managerroleid, 'tool_dataprivacy');
+
+ // Create the sample data request.
+ $datarequest = api::create_data_request($s1->id, api::DATAREQUEST_TYPE_EXPORT);
+ $requestid = $datarequest->get('id');
+
+ $this->setUser($u1);
+ $this->expectException(moodle_exception::class);
+ api::approve_data_request($requestid);
+ }
+
+ /**
+ * Test for api::approve_data_request() when called by a user who doesn't have the DPO role.
+ */
+ public function test_approve_data_request_non_dpo_user() {
+ $generator = new testing_data_generator();
+ $student = $generator->create_user();
+ $teacher = $generator->create_user();
+
+ // Create the sample data request.
+ $datarequest = api::create_data_request($student->id, api::DATAREQUEST_TYPE_EXPORT);
+
+ $requestid = $datarequest->get('id');
+
+ // Login as a user without DPO role.
+ $this->setUser($teacher);
+ $this->expectException(required_capability_exception::class);
+ api::approve_data_request($requestid);
+ }
+
+ /**
+ * Test for api::can_contact_dpo()
+ */
+ public function test_can_contact_dpo() {
+ // Default ('contactdataprotectionofficer' is enabled by default).
+ $this->assertTrue(api::can_contact_dpo());
+
+ // Disable.
+ set_config('contactdataprotectionofficer', 0, 'tool_dataprivacy');
+ $this->assertFalse(api::can_contact_dpo());
+
+ // Enable again.
+ set_config('contactdataprotectionofficer', 1, 'tool_dataprivacy');
+ $this->assertTrue(api::can_contact_dpo());
+ }
+
+ /**
+ * Test for api::can_manage_data_requests()
+ */
+ public function test_can_manage_data_requests() {
+ global $DB;
+
+ // No configured site DPOs yet.
+ $admin = get_admin();
+ $this->assertTrue(api::can_manage_data_requests($admin->id));
+
+ $generator = new testing_data_generator();
+ $dpo = $generator->create_user();
+ $nondpocapable = $generator->create_user();
+ $nondpoincapable = $generator->create_user();
+
+ $context = context_system::instance();
+
+ // Manager role.
+ $managerroleid = $DB->get_field('role', 'id', array('shortname' => 'manager'));
+ // Give the manager role with the capability to manage data requests.
+ assign_capability('tool/dataprivacy:managedatarequests', CAP_ALLOW, $managerroleid, $context->id, true);
+ // Assign u1 as a manager.
+ role_assign($managerroleid, $dpo->id, $context->id);
+
+ // Editing teacher role.
+ $editingteacherroleid = $DB->get_field('role', 'id', array('shortname' => 'editingteacher'));
+ // Give the editing teacher role with the capability to manage data requests.
+ assign_capability('tool/dataprivacy:managedatarequests', CAP_ALLOW, $managerroleid, $context->id, true);
+ // Assign u2 as an editing teacher.
+ role_assign($editingteacherroleid, $nondpocapable->id, $context->id);
+
+ // Map only the manager role to the DPO role.
+ set_config('dporoles', $managerroleid, 'tool_dataprivacy');
+
+ // User with capability and has DPO role.
+ $this->assertTrue(api::can_manage_data_requests($dpo->id));
+ // User with capability but has no DPO role.
+ $this->assertFalse(api::can_manage_data_requests($nondpocapable->id));
+ // User without the capability and has no DPO role.
+ $this->assertFalse(api::can_manage_data_requests($nondpoincapable->id));
+ }
+
+ /**
+ * Test for api::create_data_request()
+ */
+ public function test_create_data_request() {
+ $generator = new testing_data_generator();
+ $user = $generator->create_user();
+ $comment = 'sample comment';
+
+ // Login as user.
+ $this->setUser($user->id);
+
+ // Test data request creation.
+ $datarequest = api::create_data_request($user->id, api::DATAREQUEST_TYPE_EXPORT, $comment);
+ $this->assertEquals($user->id, $datarequest->get('userid'));
+ $this->assertEquals($user->id, $datarequest->get('requestedby'));
+ $this->assertEquals(api::DATAREQUEST_TYPE_EXPORT, $datarequest->get('type'));
+ $this->assertEquals(api::DATAREQUEST_STATUS_PENDING, $datarequest->get('status'));
+ $this->assertEquals($comment, $datarequest->get('comments'));
+
+ // Test adhoc task creation.
+ $adhoctasks = manager::get_adhoc_tasks(initiate_data_request_task::class);
+ $this->assertCount(1, $adhoctasks);
+ }
+
+ /**
+ * Test for api::deny_data_request()
+ */
+ public function test_deny_data_request() {
+ $generator = new testing_data_generator();
+ $user = $generator->create_user();
+ $comment = 'sample comment';
+
+ // Login as user.
+ $this->setUser($user->id);
+
+ // Test data request creation.
+ $datarequest = api::create_data_request($user->id, api::DATAREQUEST_TYPE_EXPORT, $comment);
+
+ // Login as the admin (default DPO when no one is set).
+ $this->setAdminUser();
+
+ // Make this ready for approval.
+ api::update_request_status($datarequest->get('id'), api::DATAREQUEST_STATUS_AWAITING_APPROVAL);
+
+ // Deny the data request.
+ $result = api::deny_data_request($datarequest->get('id'));
+ $this->assertTrue($result);
+ }
+
+ /**
+ * Test for api::deny_data_request()
+ */
+ public function test_deny_data_request_without_permissions() {
+ $generator = new testing_data_generator();
+ $user = $generator->create_user();
+ $comment = 'sample comment';
+
+ // Login as user.
+ $this->setUser($user->id);
+
+ // Test data request creation.
+ $datarequest = api::create_data_request($user->id, api::DATAREQUEST_TYPE_EXPORT, $comment);
+
+ // Login as a non-DPO user and try to call deny_data_request.
+ $user2 = $generator->create_user();
+ $this->setUser($user2);
+ $this->expectException(required_capability_exception::class);
+ api::deny_data_request($datarequest->get('id'));
+ }
+
+ /**
+ * Test for api::get_data_requests()
+ */
+ public function test_get_data_requests() {
+ $generator = new testing_data_generator();
+ $user1 = $generator->create_user();
+ $user2 = $generator->create_user();
+ $comment = 'sample comment';
+
+ // Make a data request as user 1.
+ $d1 = api::create_data_request($user1->id, api::DATAREQUEST_TYPE_EXPORT, $comment);
+ // Make a data request as user 2.
+ $d2 = api::create_data_request($user2->id, api::DATAREQUEST_TYPE_EXPORT, $comment);
+
+ // Fetching data requests of specific users.
+ $requests = api::get_data_requests($user1->id);
+ $this->assertCount(1, $requests);
+ $datarequest = reset($requests);
+ $this->assertEquals($d1->to_record(), $datarequest->to_record());
+
+ $requests = api::get_data_requests($user2->id);
+ $this->assertCount(1, $requests);
+ $datarequest = reset($requests);
+ $this->assertEquals($d2->to_record(), $datarequest->to_record());
+
+ // Fetching data requests of all users.
+ // As guest.
+ $this->setGuestUser();
+ $requests = api::get_data_requests();
+ $this->assertEmpty($requests);
+
+ // As DPO (admin in this case, which is default if no site DPOs are set).
+ $this->setAdminUser();
+ $requests = api::get_data_requests();
+ $this->assertCount(2, $requests);
+ }
+
+ /**
+ * Data provider for test_has_ongoing_request.
+ */
+ public function status_provider() {
+ return [
+ [api::DATAREQUEST_STATUS_PENDING, true],
+ [api::DATAREQUEST_STATUS_PREPROCESSING, true],
+ [api::DATAREQUEST_STATUS_AWAITING_APPROVAL, true],
+ [api::DATAREQUEST_STATUS_APPROVED, true],
+ [api::DATAREQUEST_STATUS_PROCESSING, true],
+ [api::DATAREQUEST_STATUS_COMPLETE, false],
+ [api::DATAREQUEST_STATUS_CANCELLED, false],
+ [api::DATAREQUEST_STATUS_REJECTED, false],
+ ];
+ }
+
+ /**
+ * Test for api::has_ongoing_request()
+ *
+ * @dataProvider status_provider
+ * @param int $status The request status.
+ * @param bool $expected The expected result.
+ */
+ public function test_has_ongoing_request($status, $expected) {
+ $generator = new testing_data_generator();
+ $user1 = $generator->create_user();
+
+ // Make a data request as user 1.
+ $request = api::create_data_request($user1->id, api::DATAREQUEST_TYPE_EXPORT);
+ // Set the status.
+ api::update_request_status($request->get('id'), $status);
+
+ // Check if this request is ongoing.
+ $result = api::has_ongoing_request($user1->id, api::DATAREQUEST_TYPE_EXPORT);
+ $this->assertEquals($expected, $result);
+ }
+
+ /**
+ * Test for api::is_active()
+ *
+ * @dataProvider status_provider
+ * @param int $status The request status
+ * @param bool $expected The expected result
+ */
+ public function test_is_active($status, $expected) {
+ // Check if this request is ongoing.
+ $result = api::is_active($status);
+ $this->assertEquals($expected, $result);
+ }
+
+ /**
+ * Test for api::is_site_dpo()
+ */
+ public function test_is_site_dpo() {
+ global $DB;
+
+ // No configured site DPOs yet.
+ $admin = get_admin();
+ $this->assertTrue(api::is_site_dpo($admin->id));
+
+ $generator = new testing_data_generator();
+ $dpo = $generator->create_user();
+ $nondpo = $generator->create_user();
+
+ $context = context_system::instance();
+
+ // Manager role.
+ $managerroleid = $DB->get_field('role', 'id', array('shortname' => 'manager'));
+ // Give the manager role with the capability to manage data requests.
+ assign_capability('tool/dataprivacy:managedatarequests', CAP_ALLOW, $managerroleid, $context->id, true);
+ // Assign u1 as a manager.
+ role_assign($managerroleid, $dpo->id, $context->id);
+
+ // Map only the manager role to the DPO role.
+ set_config('dporoles', $managerroleid, 'tool_dataprivacy');
+
+ // User is a DPO.
+ $this->assertTrue(api::is_site_dpo($dpo->id));
+ // User is not a DPO.
+ $this->assertFalse(api::is_site_dpo($nondpo->id));
+ }
+
+ /**
+ * Data provider function for test_notify_dpo
+ *
+ * @return array
+ */
+ public function notify_dpo_provider() {
+ return [
+ [api::DATAREQUEST_TYPE_EXPORT, 'requesttypeexport'],
+ [api::DATAREQUEST_TYPE_DELETE, 'requesttypedelete'],
+ [api::DATAREQUEST_TYPE_OTHERS, 'requesttypeothers'],
+ ];
+ }
+
+ /**
+ * Test for api::notify_dpo()
+ *
+ * @dataProvider notify_dpo_provider
+ * @param int $type The request type
+ * @param string $typestringid The request lang string identifier
+ */
+ public function test_notify_dpo($type, $typestringid) {
+ $generator = new testing_data_generator();
+ $user1 = $generator->create_user();
+
+ // Make a data request as user 1.
+ $this->setUser($user1);
+ $request = api::create_data_request($user1->id, $type);
+
+ $sink = $this->redirectMessages();
+ // Let's just use admin as DPO (It's the default if not set).
+ $dpo = get_admin();
+ $messageid = api::notify_dpo($dpo, $request);
+ $this->assertNotFalse($messageid);
+ $messages = $sink->get_messages();
+ $this->assertCount(1, $messages);
+ $message = reset($messages);
+
+ // Check some of the message properties.
+ $this->assertEquals($user1->id, $message->useridfrom);
+ $this->assertEquals($dpo->id, $message->useridto);
+ $typestring = get_string($typestringid, 'tool_dataprivacy');
+ $subject = get_string('datarequestemailsubject', 'tool_dataprivacy', $typestring);
+ $this->assertEquals($subject, $message->subject);
+ $this->assertEquals('tool_dataprivacy', $message->component);
+ $this->assertEquals('contactdataprotectionofficer', $message->eventtype);
+ $this->assertContains(fullname($dpo), $message->fullmessage);
+ $this->assertContains(fullname($user1), $message->fullmessage);
+ }
+
+ /**
+ * Test of creating purpose as a user without privileges.
+ */
+ public function test_create_purpose_non_dpo_user() {
+ $pleb = $this->getDataGenerator()->create_user();
+
+ $this->setUser($pleb);
+ $this->expectException(required_capability_exception::class);
+ api::create_purpose((object)[
+ 'name' => 'aaa',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1,
+ 'retentionperiod' => 'PT1M'
+ ]);
+ }
+
+ /**
+ * Test fetching of purposes as a user without privileges.
+ */
+ public function test_get_purposes_non_dpo_user() {
+ $pleb = $this->getDataGenerator()->create_user();
+ $this->setAdminUser();
+ api::create_purpose((object)[
+ 'name' => 'bbb',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1,
+ 'retentionperiod' => 'PT1M'
+ ]);
+
+ $this->setUser($pleb);
+ $this->expectException(required_capability_exception::class);
+ api::get_purposes();
+ }
+
+ /**
+ * Test updating of purpose as a user without privileges.
+ */
+ public function test_update_purposes_non_dpo_user() {
+ $pleb = $this->getDataGenerator()->create_user();
+ $this->setAdminUser();
+ $purpose = api::create_purpose((object)[
+ 'name' => 'bbb',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1,
+ 'retentionperiod' => 'PT1M'
+ ]);
+
+ $this->setUser($pleb);
+ $this->expectException(required_capability_exception::class);
+ $purpose->set('retentionperiod', 'PT2M');
+ api::update_purpose($purpose->to_record());
+ }
+
+ /**
+ * Test purpose deletion as a user without privileges.
+ */
+ public function test_delete_purpose_non_dpo_user() {
+ $pleb = $this->getDataGenerator()->create_user();
+ $this->setAdminUser();
+ $purpose = api::create_purpose((object)[
+ 'name' => 'bbb',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1,
+ 'retentionperiod' => 'PT1M'
+ ]);
+
+ $this->setUser($pleb);
+ $this->expectException(required_capability_exception::class);
+ api::delete_purpose($purpose->get('id'));
+ }
+
+ /**
+ * Test data purposes CRUD actions.
+ *
+ * @return null
+ */
+ public function test_purpose_crud() {
+
+ $this->setAdminUser();
+
+ // Add.
+ $purpose = api::create_purpose((object)[
+ 'name' => 'bbb',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1,
+ 'retentionperiod' => 'PT1M'
+ ]);
+ $this->assertInstanceOf('\tool_dataprivacy\purpose', $purpose);
+ $this->assertEquals('bbb', $purpose->get('name'));
+ $this->assertEquals('PT1M', $purpose->get('retentionperiod'));
+
+ // Update.
+ $purpose->set('retentionperiod', 'PT2M');
+ $purpose = api::update_purpose($purpose->to_record());
+ $this->assertEquals('PT2M', $purpose->get('retentionperiod'));
+
+ // Retrieve.
+ $purpose = api::create_purpose((object)['name' => 'aaa', 'retentionperiod' => 'PT1M']);
+ $purposes = api::get_purposes();
+ $this->assertCount(2, $purposes);
+ $this->assertEquals('aaa', $purposes[0]->get('name'));
+ $this->assertEquals('bbb', $purposes[1]->get('name'));
+
+ // Delete.
+ api::delete_purpose($purposes[0]->get('id'));
+ $this->assertCount(1, api::get_purposes());
+ api::delete_purpose($purposes[1]->get('id'));
+ $this->assertCount(0, api::get_purposes());
+ }
+
+ /**
+ * Test creation of data categories as a user without privileges.
+ */
+ public function test_create_category_non_dpo_user() {
+ $pleb = $this->getDataGenerator()->create_user();
+
+ $this->setUser($pleb);
+ $this->expectException(required_capability_exception::class);
+ api::create_category((object)[
+ 'name' => 'bbb',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1
+ ]);
+ }
+
+ /**
+ * Test fetching of data categories as a user without privileges.
+ */
+ public function test_get_categories_non_dpo_user() {
+ $pleb = $this->getDataGenerator()->create_user();
+
+ $this->setAdminUser();
+ api::create_category((object)[
+ 'name' => 'bbb',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1
+ ]);
+
+ // Back to a regular user.
+ $this->setUser($pleb);
+ $this->expectException(required_capability_exception::class);
+ api::get_categories();
+ }
+
+ /**
+ * Test updating of data category as a user without privileges.
+ */
+ public function test_update_category_non_dpo_user() {
+ $pleb = $this->getDataGenerator()->create_user();
+
+ $this->setAdminUser();
+ $category = api::create_category((object)[
+ 'name' => 'bbb',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1
+ ]);
+
+ // Back to a regular user.
+ $this->setUser($pleb);
+ $this->expectException(required_capability_exception::class);
+ $category->set('name', 'yeah');
+ api::update_category($category->to_record());
+ }
+
+ /**
+ * Test deletion of data category as a user without privileges.
+ */
+ public function test_delete_category_non_dpo_user() {
+ $pleb = $this->getDataGenerator()->create_user();
+
+ $this->setAdminUser();
+ $category = api::create_category((object)[
+ 'name' => 'bbb',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1
+ ]);
+
+ // Back to a regular user.
+ $this->setUser($pleb);
+ $this->expectException(required_capability_exception::class);
+ api::delete_category($category->get('id'));
+ $this->fail('Users shouldn\'t be allowed to manage categories by default');
+ }
+
+ /**
+ * Test data categories CRUD actions.
+ *
+ * @return null
+ */
+ public function test_category_crud() {
+
+ $this->setAdminUser();
+
+ // Add.
+ $category = api::create_category((object)[
+ 'name' => 'bbb',
+ 'description' => 'yeah',
+ 'descriptionformat' => 1
+ ]);
+ $this->assertInstanceOf('\tool_dataprivacy\category', $category);
+ $this->assertEquals('bbb', $category->get('name'));
+
+ // Update.
+ $category->set('name', 'bcd');
+ $category = api::update_category($category->to_record());
+ $this->assertEquals('bcd', $category->get('name'));
+
+ // Retrieve.
+ $category = api::create_category((object)['name' => 'aaa']);
+ $categories = api::get_categories();
+ $this->assertCount(2, $categories);
+ $this->assertEquals('aaa', $categories[0]->get('name'));
+ $this->assertEquals('bcd', $categories[1]->get('name'));
+
+ // Delete.
+ api::delete_category($categories[0]->get('id'));
+ $this->assertCount(1, api::get_categories());
+ api::delete_category($categories[1]->get('id'));
+ $this->assertCount(0, api::get_categories());
+ }
+
+ /**
+ * Test context instances.
+ *
+ * @return null
+ */
+ public function test_context_instances() {
+ global $DB;
+
+ $this->setAdminUser();
+
+ list($purposes, $categories, $courses, $modules) = $this->add_purposes_and_categories();
+
+ $coursecontext1 = \context_course::instance($courses[0]->id);
+ $coursecontext2 = \context_course::instance($courses[1]->id);
+
+ $record1 = (object)['contextid' => $coursecontext1->id, 'purposeid' => $purposes[0]->get('id'), 'categoryid' => $categories[0]->get('id')];
+ $contextinstance1 = api::set_context_instance($record1);
+
+ $record2 = (object)['contextid' => $coursecontext2->id, 'purposeid' => $purposes[1]->get('id'), 'categoryid' => $categories[1]->get('id')];
+ $contextinstance2 = api::set_context_instance($record2);
+
+ $this->assertCount(2, $DB->get_records('tool_dataprivacy_ctxinstance'));
+
+ api::unset_context_instance($contextinstance1);
+ $this->assertCount(1, $DB->get_records('tool_dataprivacy_ctxinstance'));
+
+ $update = (object)['id' => $contextinstance2->get('id'), 'contextid' => $coursecontext2->id,
+ 'purposeid' => $purposes[0]->get('id'), 'categoryid' => $categories[0]->get('id')];
+ $contextinstance2 = api::set_context_instance($update);
+ $this->assertCount(1, $DB->get_records('tool_dataprivacy_ctxinstance'));
+ }
+
+ /**
+ * Test contextlevel.
+ *
+ * @return null
+ */
+ public function test_contextlevel() {
+ global $DB;
+
+ $this->setAdminUser();
+ list($purposes, $categories, $courses, $modules) = $this->add_purposes_and_categories();
+
+ $record = (object)[
+ 'purposeid' => $purposes[0]->get('id'),
+ 'categoryid' => $categories[0]->get('id'),
+ 'contextlevel' => CONTEXT_SYSTEM,
+ ];
+ $contextlevel = api::set_contextlevel($record);
+ $this->assertInstanceOf('\tool_dataprivacy\contextlevel', $contextlevel);
+ $this->assertEquals($record->contextlevel, $contextlevel->get('contextlevel'));
+ $this->assertEquals($record->purposeid, $contextlevel->get('purposeid'));
+ $this->assertEquals($record->categoryid, $contextlevel->get('categoryid'));
+
+ // Now update it.
+ $record->purposeid = $purposes[1]->get('id');
+ $contextlevel = api::set_contextlevel($record);
+ $this->assertEquals($record->contextlevel, $contextlevel->get('contextlevel'));
+ $this->assertEquals($record->purposeid, $contextlevel->get('purposeid'));
+ $this->assertEquals(1, $DB->count_records('tool_dataprivacy_ctxlevel'));
+
+ $record->contextlevel = CONTEXT_USER;
+ $contextlevel = api::set_contextlevel($record);
+ $this->assertEquals(2, $DB->count_records('tool_dataprivacy_ctxlevel'));
+ }
+
+ /**
+ * Test effective context levels purpose and category defaults.
+ *
+ * @return null
+ */
+ public function test_effective_contextlevel_defaults() {
+ $this->setAdminUser();
+
+ list($purposes, $categories, $courses, $modules) = $this->add_purposes_and_categories();
+
+ list($purposeid, $categoryid) = data_registry::get_effective_default_contextlevel_purpose_and_category(CONTEXT_SYSTEM);
+ $this->assertEquals(false, $purposeid);
+ $this->assertEquals(false, $categoryid);
+
+ list($purposevar, $categoryvar) = data_registry::var_names_from_context(
+ \context_helper::get_class_for_level(CONTEXT_SYSTEM)
+ );
+ set_config($purposevar, $purposes[0]->get('id'), 'tool_dataprivacy');
+
+ list($purposeid, $categoryid) = data_registry::get_effective_default_contextlevel_purpose_and_category(CONTEXT_SYSTEM);
+ $this->assertEquals($purposes[0]->get('id'), $purposeid);
+ $this->assertEquals(false, $categoryid);
+
+ // Course inherits from system if not defined.
+ list($purposeid, $categoryid) = data_registry::get_effective_default_contextlevel_purpose_and_category(CONTEXT_COURSE);
+ $this->assertEquals($purposes[0]->get('id'), $purposeid);
+ $this->assertEquals(false, $categoryid);
+
+ // Course defined values should have preference.
+ list($purposevar, $categoryvar) = data_registry::var_names_from_context(
+ \context_helper::get_class_for_level(CONTEXT_COURSE)
+ );
+ set_config($purposevar, $purposes[1]->get('id'), 'tool_dataprivacy');
+ set_config($categoryvar, $categories[0]->get('id'), 'tool_dataprivacy');
+
+ list($purposeid, $categoryid) = data_registry::get_effective_default_contextlevel_purpose_and_category(CONTEXT_COURSE);
+ $this->assertEquals($purposes[1]->get('id'), $purposeid);
+ $this->assertEquals($categories[0]->get('id'), $categoryid);
+
+ // Context level defaults are also allowed to be set to 'inherit'.
+ set_config($purposevar, context_instance::INHERIT, 'tool_dataprivacy');
+
+ list($purposeid, $categoryid) = data_registry::get_effective_default_contextlevel_purpose_and_category(CONTEXT_COURSE);
+ $this->assertEquals($purposes[0]->get('id'), $purposeid);
+ $this->assertEquals($categories[0]->get('id'), $categoryid);
+
+ list($purposeid, $categoryid) = data_registry::get_effective_default_contextlevel_purpose_and_category(CONTEXT_MODULE);
+ $this->assertEquals($purposes[0]->get('id'), $purposeid);
+ $this->assertEquals($categories[0]->get('id'), $categoryid);
+ }
+
+ /**
+ * Test effective contextlevel return.
+ *
+ * @return null
+ */
+ public function test_effective_contextlevel() {
+ $this->setAdminUser();
+
+ list($purposes, $categories, $courses, $modules) = $this->add_purposes_and_categories();
+
+ // Set the system context level to purpose 1.
+ $record = (object)[
+ 'contextlevel' => CONTEXT_SYSTEM,
+ 'purposeid' => $purposes[1]->get('id'),
+ 'categoryid' => $categories[1]->get('id'),
+ ];
+ api::set_contextlevel($record);
+
+ $purpose = api::get_effective_contextlevel_purpose(CONTEXT_SYSTEM);
+ $this->assertEquals($purposes[1]->get('id'), $purpose->get('id'));
+
+ // 'not set' will get the default value for the context level. For context level defaults
+ // both 'not set' and 'inherit' result in inherit, so the parent context (system) default
+ // will be retrieved.
+ $purpose = api::get_effective_contextlevel_purpose(CONTEXT_USER);
+ $this->assertEquals($purposes[1]->get('id'), $purpose->get('id'));
+
+ // The behaviour forcing an inherit from context system should result in the same effective
+ // purpose.
+ $record->purposeid = context_instance::INHERIT;
+ $record->contextlevel = CONTEXT_USER;
+ api::set_contextlevel($record);
+ $purpose = api::get_effective_contextlevel_purpose(CONTEXT_USER);
+ $this->assertEquals($purposes[1]->get('id'), $purpose->get('id'));
+
+ $record->purposeid = $purposes[2]->get('id');
+ $record->contextlevel = CONTEXT_USER;
+ api::set_contextlevel($record);
+
+ $purpose = api::get_effective_contextlevel_purpose(CONTEXT_USER);
+ $this->assertEquals($purposes[2]->get('id'), $purpose->get('id'));
+
+ // Only system and user allowed.
+ $this->expectException(coding_exception::class);
+ $record->contextlevel = CONTEXT_COURSE;
+ $record->purposeid = $purposes[1]->get('id');
+ api::set_contextlevel($record);
+ }
+
+ /**
+ * Test effective context purposes and categories.
+ *
+ * @return null
+ */
+ public function test_effective_context() {
+ $this->setAdminUser();
+
+ list($purposes, $categories, $courses, $modules) = $this->add_purposes_and_categories();
+
+ // Define system defaults (all context levels below will inherit).
+ list($purposevar, $categoryvar) = data_registry::var_names_from_context(
+ \context_helper::get_class_for_level(CONTEXT_SYSTEM)
+ );
+ set_config($purposevar, $purposes[0]->get('id'), 'tool_dataprivacy');
+ set_config($categoryvar, $categories[0]->get('id'), 'tool_dataprivacy');
+
+ // Define course defaults.
+ list($purposevar, $categoryvar) = data_registry::var_names_from_context(
+ \context_helper::get_class_for_level(CONTEXT_COURSE)
+ );
+ set_config($purposevar, $purposes[1]->get('id'), 'tool_dataprivacy');
+ set_config($categoryvar, $categories[1]->get('id'), 'tool_dataprivacy');
+
+ $course0context = \context_course::instance($courses[0]->id);
+ $course1context = \context_course::instance($courses[1]->id);
+ $mod0context = \context_module::instance($modules[0]->cmid);
+ $mod1context = \context_module::instance($modules[1]->cmid);
+
+ // Set course instance values.
+ $record = (object)[
+ 'contextid' => $course0context->id,
+ 'purposeid' => $purposes[1]->get('id'),
+ 'categoryid' => $categories[2]->get('id'),
+ ];
+ api::set_context_instance($record);
+ $category = api::get_effective_context_category($course0context);
+ $this->assertEquals($record->categoryid, $category->get('id'));
+
+ // Module instances get the context level default if nothing specified.
+ $category = api::get_effective_context_category($mod0context);
+ $this->assertEquals($categories[1]->get('id'), $category->get('id'));
+
+ // Module instances get the parent context category if they inherit.
+ $record->contextid = $mod0context->id;
+ $record->categoryid = context_instance::INHERIT;
+ api::set_context_instance($record);
+ $category = api::get_effective_context_category($mod0context);
+ $this->assertEquals($categories[2]->get('id'), $category->get('id'));
+
+ // The $forcedvalue param allows us to override the actual value (method php-docs for more info).
+ $category = api::get_effective_context_category($mod0context, $categories[1]->get('id'));
+ $this->assertEquals($categories[1]->get('id'), $category->get('id'));
+ $category = api::get_effective_context_category($mod0context, $categories[0]->get('id'));
+ $this->assertEquals($categories[0]->get('id'), $category->get('id'));
+
+ // Module instances get the parent context category if they inherit; in
+ // this case the parent context category is not set so it should use the
+ // context level default (see 'Define course defaults' above).
+ $record->contextid = $mod1context->id;
+ $record->categoryid = context_instance::INHERIT;
+ api::set_context_instance($record);
+ $category = api::get_effective_context_category($mod1context);
+ $this->assertEquals($categories[1]->get('id'), $category->get('id'));
+
+ // User instances use the value set at user context level instead of the user default.
+
+ // User defaults to cat 0 and user context level to 1.
+ list($purposevar, $categoryvar) = data_registry::var_names_from_context(
+ \context_helper::get_class_for_level(CONTEXT_USER)
+ );
+ set_config($purposevar, $purposes[0]->get('id'), 'tool_dataprivacy');
+ set_config($categoryvar, $categories[0]->get('id'), 'tool_dataprivacy');
+ $usercontextlevel = (object)[
+ 'contextlevel' => CONTEXT_USER,
+ 'purposeid' => $purposes[1]->get('id'),
+ 'categoryid' => $categories[1]->get('id'),
+ ];
+ api::set_contextlevel($usercontextlevel);
+
+ $newuser = $this->getDataGenerator()->create_user();
+ $usercontext = \context_user::instance($newuser->id);
+ $category = api::get_effective_context_category($usercontext);
+ $this->assertEquals($categories[1]->get('id'), $category->get('id'));
+ }
+
+ /**
+ * Tests the deletion of expired contexts.
+ *
+ * @return null
+ */
+ public function test_expired_context_deletion() {
+ global $DB;
+
+ $this->setAdminUser();
+
+ list($purposes, $categories, $courses, $modules) = $this->add_purposes_and_categories();
+
+ $course0context = \context_course::instance($courses[0]->id);
+ $course1context = \context_course::instance($courses[1]->id);
+
+ $expiredcontext0 = api::create_expired_context($course0context->id);
+ $this->assertEquals(1, $DB->count_records('tool_dataprivacy_ctxexpired'));
+ $expiredcontext1 = api::create_expired_context($course1context->id);
+ $this->assertEquals(2, $DB->count_records('tool_dataprivacy_ctxexpired'));
+
+ api::delete_expired_context($expiredcontext0->get('id'));
+ $this->assertEquals(1, $DB->count_records('tool_dataprivacy_ctxexpired'));
+ }
+
+ /**
+ * Tests the status of expired contexts.
+ *
+ * @return null
+ */
+ public function test_expired_context_status() {
+ global $DB;
+
+ $this->setAdminUser();
+
+ list($purposes, $categories, $courses, $modules) = $this->add_purposes_and_categories();
+
+ $course0context = \context_course::instance($courses[0]->id);
+
+ $expiredcontext = api::create_expired_context($course0context->id);
+
+ // Default status.
+ $this->assertEquals(expired_context::STATUS_EXPIRED, $expiredcontext->get('status'));
+
+ api::set_expired_context_status($expiredcontext, expired_context::STATUS_APPROVED);
+ $this->assertEquals(expired_context::STATUS_APPROVED, $expiredcontext->get('status'));
+ }
+
+ /**
+ * Creates test purposes and categories.
+ *
+ * @return null
+ */
+ protected function add_purposes_and_categories() {
+
+ $purpose1 = api::create_purpose((object)['name' => 'p1', 'retentionperiod' => 'PT1H']);
+ $purpose2 = api::create_purpose((object)['name' => 'p2', 'retentionperiod' => 'PT2H']);
+ $purpose3 = api::create_purpose((object)['name' => 'p3', 'retentionperiod' => 'PT3H']);
+
+ $cat1 = api::create_category((object)['name' => 'a']);
+ $cat2 = api::create_category((object)['name' => 'b']);
+ $cat3 = api::create_category((object)['name' => 'c']);
+
+ $course1 = $this->getDataGenerator()->create_course();
+ $course2 = $this->getDataGenerator()->create_course();
+
+ $module1 = $this->getDataGenerator()->create_module('resource', array('course' => $course1));
+ $module2 = $this->getDataGenerator()->create_module('resource', array('course' => $course2));
+
+ return [
+ [$purpose1, $purpose2, $purpose3],
+ [$cat1, $cat2, $cat3],
+ [$course1, $course2],
+ [$module1, $module2]
+ ];
+ }
+}
diff --git a/admin/tool/dataprivacy/tests/expired_contexts_test.php b/admin/tool/dataprivacy/tests/expired_contexts_test.php
new file mode 100644
index 00000000000..1b1f82f0bd9
--- /dev/null
+++ b/admin/tool/dataprivacy/tests/expired_contexts_test.php
@@ -0,0 +1,209 @@
+.
+
+/**
+ * Expired contexts tests.
+ *
+ * @package tool_dataprivacy
+ * @copyright 2018 David Monllao
+ * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+
+use tool_dataprivacy\api;
+use tool_dataprivacy\data_registry;
+use tool_dataprivacy\expired_context;
+
+defined('MOODLE_INTERNAL') || die();
+global $CFG;
+
+/**
+ * Expired contexts tests.
+ *
+ * @package tool_dataprivacy
+ * @copyright 2018 David Monllao
+ * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+class tool_dataprivacy_expired_contexts_testcase extends advanced_testcase {
+
+ /**
+ * setUp.
+ */
+ public function setUp() {
+ $this->resetAfterTest();
+ $this->setAdminUser();
+ }
+
+ /**
+ * Test expired users flagging and deletion.
+ *
+ * @return null
+ */
+ public function test_expired_users() {
+ global $DB;
+
+ $purpose = api::create_purpose((object)['name' => 'p1', 'retentionperiod' => 'PT1H']);
+ $cat = api::create_category((object)['name' => 'a']);
+
+ $record = (object)[
+ 'purposeid' => $purpose->get('id'),
+ 'categoryid' => $cat->get('id'),
+ 'contextlevel' => CONTEXT_SYSTEM,
+ ];
+ api::set_contextlevel($record);
+ $record->contextlevel = CONTEXT_USER;
+ api::set_contextlevel($record);
+
+ $userdata = ['lastaccess' => '123'];
+ $user1 = $this->getDataGenerator()->create_user($userdata);
+ $user2 = $this->getDataGenerator()->create_user($userdata);
+ $user3 = $this->getDataGenerator()->create_user($userdata);
+ $user4 = $this->getDataGenerator()->create_user($userdata);
+ $user5 = $this->getDataGenerator()->create_user();
+
+ $course1 = $this->getDataGenerator()->create_course();
+ // Old course.
+ $course2 = $this->getDataGenerator()->create_course(['startdate' => '1', 'enddate' => '2']);
+ // Ongoing course.
+ $course3 = $this->getDataGenerator()->create_course(['startdate' => '1', 'enddate' => time()]);
+
+ $this->getDataGenerator()->enrol_user($user1->id, $course1->id, 'student');
+ $this->getDataGenerator()->enrol_user($user2->id, $course2->id, 'student');
+ $this->getDataGenerator()->enrol_user($user3->id, $course2->id, 'student');
+ $this->getDataGenerator()->enrol_user($user4->id, $course3->id, 'student');
+
+ // Users without lastaccess are skipped as well as users enroled in courses with no end date.
+ $expired = new \tool_dataprivacy\expired_user_contexts();
+ $numexpired = $expired->flag_expired();
+ $this->assertEquals(2, $numexpired);
+ $this->assertEquals(2, $DB->count_records('tool_dataprivacy_ctxexpired', ['status' => expired_context::STATUS_EXPIRED]));
+
+ // Approve user1 to be deleted.
+ $user2ctx = \context_user::instance($user2->id);
+ $expiredctx = expired_context::get_record(['contextid' => $user2ctx->id]);
+ api::set_expired_context_status($expiredctx, expired_context::STATUS_APPROVED);
+ $this->assertEquals(1, $DB->count_records('tool_dataprivacy_ctxexpired', ['status' => expired_context::STATUS_APPROVED]));
+
+ // Delete expired contexts.
+ $deleted = $expired->delete();
+ $this->assertEquals(1, $deleted);
+ $this->assertEquals(1, $DB->count_records('tool_dataprivacy_ctxexpired', ['status' => expired_context::STATUS_EXPIRED]));
+ $this->assertEquals(1, $DB->count_records('tool_dataprivacy_ctxexpired', ['status' => expired_context::STATUS_CLEANED]));
+
+ // No new records are generated.
+ $numexpired = $expired->flag_expired();
+ $this->assertEquals(0, $numexpired);
+ $this->assertEquals(2, $DB->count_records('tool_dataprivacy_ctxexpired'));
+ $deleted = $expired->delete();
+ $this->assertEquals(0, $deleted);
+ }
+
+ /**
+ * Test expired course and course stuff flagging and deletion.
+ *
+ * @return null
+ */
+ public function test_expired_course_related_contexts() {
+ global $DB;
+
+ $purpose1 = api::create_purpose((object)['name' => 'p1', 'retentionperiod' => 'PT1H']);
+ $purpose2 = api::create_purpose((object)['name' => 'p1', 'retentionperiod' => 'P1000Y']);
+ $cat = api::create_category((object)['name' => 'a']);
+
+ $record = (object)[
+ 'purposeid' => $purpose1->get('id'),
+ 'categoryid' => $cat->get('id'),
+ 'contextlevel' => CONTEXT_SYSTEM,
+ ];
+ api::set_contextlevel($record);
+
+ list($purposevar, $categoryvar) = data_registry::var_names_from_context(
+ \context_helper::get_class_for_level(CONTEXT_COURSE)
+ );
+ set_config($purposevar, $purpose1->get('id'), 'tool_dataprivacy');
+
+ // A lot more time for modules
+ list($purposevar, $categoryvar) = data_registry::var_names_from_context(
+ \context_helper::get_class_for_level(CONTEXT_MODULE)
+ );
+ set_config($purposevar, $purpose2->get('id'), 'tool_dataprivacy');
+
+ $course1 = $this->getDataGenerator()->create_course();
+
+ // Old course.
+ $course2 = $this->getDataGenerator()->create_course(['startdate' => '1', 'enddate' => '2']);
+ $forum1 = $this->getDataGenerator()->create_module('forum', array('course' => $course2->id));
+ $forum2 = $this->getDataGenerator()->create_module('forum', array('course' => $course2->id));
+
+ // We want to override this last module instance purpose so we can test that modules are also
+ // returned as expired.
+ $forum2ctx = \context_module::instance($forum2->cmid);
+ $record = (object)[
+ 'purposeid' => $purpose1->get('id'),
+ 'categoryid' => $cat->get('id'),
+ 'contextid' => $forum2ctx->id,
+ ];
+ api::set_context_instance($record);
+
+ // Ongoing course.
+ $course3 = $this->getDataGenerator()->create_course(['startdate' => '1', 'enddate' => time()]);
+ $forum3 = $this->getDataGenerator()->create_module('forum', array('course' => $course3->id));
+
+ $expired = new \tool_dataprivacy\expired_course_related_contexts();
+ $numexpired = $expired->flag_expired();
+
+ // Only 1 module has expired.
+ $this->assertEquals(1, $numexpired);
+ $this->assertEquals(1, $DB->count_records('tool_dataprivacy_ctxexpired', ['status' => expired_context::STATUS_EXPIRED]));
+
+ // Add a forum1 override to 1h retention period so both forum1 and course2 are also expired.
+ $forum1ctx = \context_module::instance($forum1->cmid);
+ $record->purposeid = $purpose1->get('id');
+ $record->contextid = $forum1ctx->id;
+ api::set_context_instance($record);
+ $numexpired = $expired->flag_expired();
+ $this->assertEquals(2, $numexpired);
+ $this->assertEquals(3, $DB->count_records('tool_dataprivacy_ctxexpired', ['status' => expired_context::STATUS_EXPIRED]));
+
+ // Approve forum1 to be deleted.
+ $expiredctx = expired_context::get_record(['contextid' => $forum1ctx->id]);
+ api::set_expired_context_status($expiredctx, expired_context::STATUS_APPROVED);
+
+ // Delete expired contexts.
+ $deleted = $expired->delete();
+ $this->assertEquals(1, $deleted);
+ $this->assertEquals(1, $DB->count_records('tool_dataprivacy_ctxexpired', ['status' => expired_context::STATUS_CLEANED]));
+
+ $expiredctx = expired_context::get_record(['contextid' => $forum2ctx->id]);
+ api::set_expired_context_status($expiredctx, expired_context::STATUS_APPROVED);
+
+ $course2ctx = \context_course::instance($course2->id);
+ $expiredctx = expired_context::get_record(['contextid' => $course2ctx->id]);
+ api::set_expired_context_status($expiredctx, expired_context::STATUS_APPROVED);
+
+ // Delete expired contexts.
+ $deleted = $expired->delete();
+ $this->assertEquals(2, $deleted);
+ $this->assertEquals(3, $DB->count_records('tool_dataprivacy_ctxexpired', ['status' => expired_context::STATUS_CLEANED]));
+
+ // No new records are generated.
+ $numexpired = $expired->flag_expired();
+ $this->assertEquals(0, $numexpired);
+ $this->assertEquals(3, $DB->count_records('tool_dataprivacy_ctxexpired'));
+ $deleted = $expired->delete();
+ $this->assertEquals(0, $deleted);
+
+ }
+}
diff --git a/admin/tool/dataprivacy/tests/external_test.php b/admin/tool/dataprivacy/tests/external_test.php
new file mode 100644
index 00000000000..71d0111605a
--- /dev/null
+++ b/admin/tool/dataprivacy/tests/external_test.php
@@ -0,0 +1,285 @@
+.
+
+/**
+ * External tests.
+ *
+ * @package tool_dataprivacy
+ * @copyright 2018 Jun Pataleta
+ * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+
+defined('MOODLE_INTERNAL') || die();
+global $CFG;
+
+require_once($CFG->dirroot . '/webservice/tests/helpers.php');
+
+use tool_dataprivacy\api;
+use tool_dataprivacy\external;
+
+/**
+ * External testcase.
+ *
+ * @package tool_dataprivacy
+ * @copyright 2018 Jun Pataleta
+ * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+class tool_dataprivacy_external_testcase extends externallib_advanced_testcase {
+
+ /** @var stdClass The user making the request. */
+ protected $requester;
+
+ /** @var int The data request ID. */
+ protected $requestid;
+
+ /**
+ * Setup function- we will create a course and add an assign instance to it.
+ */
+ protected function setUp() {
+ $this->resetAfterTest();
+
+ $generator = new testing_data_generator();
+ $requester = $generator->create_user();
+
+ $comment = 'sample comment';
+
+ // Login as user.
+ $this->setUser($requester->id);
+
+ // Test data request creation.
+ $datarequest = api::create_data_request($requester->id, api::DATAREQUEST_TYPE_EXPORT, $comment);
+ $this->requestid = $datarequest->get('id');
+ $this->requester = $requester;
+
+ // Log out the user and set force login to true.
+ $this->setUser();
+ }
+
+ /**
+ * Test for external::approve_data_request() with the user not logged in.
+ */
+ public function test_approve_data_request_not_logged_in() {
+ $this->expectException(require_login_exception::class);
+ external::approve_data_request($this->requestid);
+ }
+
+ /**
+ * Test for external::approve_data_request() with the user not having a DPO role.
+ */
+ public function test_approve_data_request_not_dpo() {
+ // Login as the requester.
+ $this->setUser($this->requester->id);
+ $this->expectException(required_capability_exception::class);
+ external::approve_data_request($this->requestid);
+ }
+
+ /**
+ * Test for external::approve_data_request() for request that's not ready for approval
+ */
+ public function test_approve_data_request_not_waiting_for_approval() {
+ // Admin as DPO. (The default when no one's assigned as a DPO in the site).
+ $this->setAdminUser();
+ $this->expectException(moodle_exception::class);
+ external::approve_data_request($this->requestid);
+ }
+
+ /**
+ * Test for external::approve_data_request()
+ */
+ public function test_approve_data_request() {
+ // Admin as DPO. (The default when no one's assigned as a DPO in the site).
+ $this->setAdminUser();
+ api::update_request_status($this->requestid, api::DATAREQUEST_STATUS_AWAITING_APPROVAL);
+ $result = external::approve_data_request($this->requestid);
+ $return = (object) external_api::clean_returnvalue(external::approve_data_request_returns(), $result);
+ $this->assertTrue($return->result);
+ $this->assertEmpty($return->warnings);
+ }
+
+ /**
+ * Test for external::approve_data_request() for a non-existent request ID.
+ */
+ public function test_approve_data_request_non_existent() {
+ // Admin as DPO. (The default when no one's assigned as a DPO in the site).
+ $this->setAdminUser();
+ api::update_request_status($this->requestid, api::DATAREQUEST_STATUS_AWAITING_APPROVAL);
+ $result = external::approve_data_request($this->requestid + 1);
+ $return = (object) external_api::clean_returnvalue(external::approve_data_request_returns(), $result);
+ $this->assertFalse($return->result);
+ $this->assertCount(1, $return->warnings);
+ $warning = reset($return->warnings);
+ $this->assertEquals('errorrequestnotfound', $warning['warningcode']);
+ }
+
+ /**
+ * Test for external::cancel_data_request() of another user.
+ */
+ public function test_cancel_data_request_other_user() {
+ $generator = $this->getDataGenerator();
+ $otheruser = $generator->create_user();
+
+ // Login as another user.
+ $this->setUser($otheruser);
+
+ $result = external::cancel_data_request($this->requestid);
+ $return = (object) external_api::clean_returnvalue(external::approve_data_request_returns(), $result);
+ $this->assertFalse($return->result);
+ $this->assertCount(1, $return->warnings);
+ $warning = reset($return->warnings);
+ $this->assertEquals('errorrequestnotfound', $warning['warningcode']);
+ }
+
+ /**
+ * Test for external::cancel_data_request()
+ */
+ public function test_cancel_data_request() {
+ // Login as the requester.
+ $this->setUser($this->requester);
+
+ $result = external::cancel_data_request($this->requestid);
+ $return = (object) external_api::clean_returnvalue(external::approve_data_request_returns(), $result);
+ $this->assertTrue($return->result);
+ $this->assertEmpty($return->warnings);
+ }
+
+ /**
+ * Test contact DPO.
+ */
+ public function test_contact_dpo() {
+ $generator = $this->getDataGenerator();
+ $user = $generator->create_user();
+ $this->setUser($user);
+
+ $message = 'Hello world!';
+ $result = external::contact_dpo($message);
+ $return = (object) external_api::clean_returnvalue(external::contact_dpo_returns(), $result);
+ $this->assertTrue($return->result);
+ $this->assertEmpty($return->warnings);
+ }
+
+ /**
+ * Test contact DPO with message containing invalid input.
+ */
+ public function test_contact_dpo_with_nasty_input() {
+ $generator = $this->getDataGenerator();
+ $user = $generator->create_user();
+ $this->setUser($user);
+
+ $this->expectException('invalid_parameter_exception');
+ external::contact_dpo('de<>\\..scription');
+ }
+
+ /**
+ * Test for external::deny_data_request() with the user not logged in.
+ */
+ public function test_deny_data_request_not_logged_in() {
+ $this->expectException(require_login_exception::class);
+ external::deny_data_request($this->requestid);
+ }
+
+ /**
+ * Test for external::deny_data_request() with the user not having a DPO role.
+ */
+ public function test_deny_data_request_not_dpo() {
+ // Login as the requester.
+ $this->setUser($this->requester->id);
+ $this->expectException(required_capability_exception::class);
+ external::deny_data_request($this->requestid);
+ }
+
+ /**
+ * Test for external::deny_data_request() for request that's not ready for approval
+ */
+ public function test_deny_data_request_not_waiting_for_approval() {
+ // Admin as DPO. (The default when no one's assigned as a DPO in the site).
+ $this->setAdminUser();
+ $this->expectException(moodle_exception::class);
+ external::deny_data_request($this->requestid);
+ }
+
+ /**
+ * Test for external::deny_data_request()
+ */
+ public function test_deny_data_request() {
+ // Admin as DPO. (The default when no one's assigned as a DPO in the site).
+ $this->setAdminUser();
+ api::update_request_status($this->requestid, api::DATAREQUEST_STATUS_AWAITING_APPROVAL);
+ $result = external::approve_data_request($this->requestid);
+ $return = (object) external_api::clean_returnvalue(external::deny_data_request_returns(), $result);
+ $this->assertTrue($return->result);
+ $this->assertEmpty($return->warnings);
+ }
+
+ /**
+ * Test for external::deny_data_request() for a non-existent request ID.
+ */
+ public function test_deny_data_request_non_existent() {
+ // Admin as DPO. (The default when no one's assigned as a DPO in the site).
+ $this->setAdminUser();
+ api::update_request_status($this->requestid, api::DATAREQUEST_STATUS_AWAITING_APPROVAL);
+ $result = external::deny_data_request($this->requestid + 1);
+ $return = (object) external_api::clean_returnvalue(external::deny_data_request_returns(), $result);
+ $this->assertFalse($return->result);
+ $this->assertCount(1, $return->warnings);
+ $warning = reset($return->warnings);
+ $this->assertEquals('errorrequestnotfound', $warning['warningcode']);
+ }
+
+ /**
+ * Test for external::get_data_request() with the user not logged in.
+ */
+ public function test_get_data_request_not_logged_in() {
+ $this->expectException(require_login_exception::class);
+ external::get_data_request($this->requestid);
+ }
+
+ /**
+ * Test for external::get_data_request() with the user not having a DPO role.
+ */
+ public function test_get_data_request_not_dpo() {
+ $generator = $this->getDataGenerator();
+ $otheruser = $generator->create_user();
+ // Login as the requester.
+ $this->setUser($otheruser);
+ $this->expectException(required_capability_exception::class);
+ external::get_data_request($this->requestid);
+ }
+
+ /**
+ * Test for external::get_data_request()
+ */
+ public function test_get_data_request() {
+ // Admin as DPO. (The default when no one's assigned as a DPO in the site).
+ $this->setAdminUser();
+ $result = external::get_data_request($this->requestid);
+ $return = (object) external_api::clean_returnvalue(external::get_data_request_returns(), $result);
+ $this->assertEquals(api::DATAREQUEST_TYPE_EXPORT, $return->result['type']);
+ $this->assertEquals('sample comment', $return->result['comments']);
+ $this->assertEquals($this->requester->id, $return->result['userid']);
+ $this->assertEquals($this->requester->id, $return->result['requestedby']);
+ $this->assertEmpty($return->warnings);
+ }
+
+ /**
+ * Test for external::get_data_request() for a non-existent request ID.
+ */
+ public function test_get_data_request_non_existent() {
+ // Admin as DPO. (The default when no one's assigned as a DPO in the site).
+ $this->setAdminUser();
+ $this->expectException(dml_missing_record_exception::class);
+ external::get_data_request($this->requestid + 1);
+ }
+}
diff --git a/admin/tool/dataprivacy/version.php b/admin/tool/dataprivacy/version.php
new file mode 100644
index 00000000000..9d73fe16ad5
--- /dev/null
+++ b/admin/tool/dataprivacy/version.php
@@ -0,0 +1,29 @@
+.
+
+/**
+ * Data privacy plugin version information
+ *
+ * @package tool_dataprivacy
+ * @copyright 2018 onwards Jun Pataleta
+ * @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
+ */
+
+defined('MOODLE_INTERNAL') || die;
+
+$plugin->version = 2018040500;
+$plugin->requires = 2018040500; // Moodle 3.5dev (Build 2018031600) and upwards.
+$plugin->component = 'tool_dataprivacy';
+
+
+ 
+
+
+
+ + {{foruser.fullname}} +
+ {{foruser.email}} +
+
+ {{#str}}daterequesteddetail, tool_dataprivacy{{/str}} {{#userdate}} {{timecreated}}, {{#str}} strftimedate {{/str}} {{/userdate}}
+
+
+ {{#str}}statusdetail, tool_dataprivacy{{/str}}
+ {{statuslabel}}
+
+
+ {{#canreview}}
+ {{#str}}reviewdata, tool_dataprivacy{{/str}}
+ {{/canreview}}
+ +
+ {{#str}}messagelabel, tool_dataprivacy{{/str}}
+
+
+ {{{messagehtml}}}
+
+