We would like to display the anonymous users' quiz result after they finish the quiz. The issue we are encountering is that when an anonymous user goes to view their results they are seeing all of the anonymous users quiz results (since the /user/0/quiz-results page filters by uid and there are multiple quizzes under the uid of "0", same for /node/{quiz-node-id}/quiz-results).

Removing the permission "View own quiz results " for "anonymous user" is not an option, because this will also disable the ability to show the last result. But maybe it is half way to solve the problem, just show the result of the last quiz, the anonymous user has taken and disable the possibility to guess other result IDs. This might be achieved by using a hash in the URL, like /node/{quiz-node-id}/quiz-results/{hash}.

Another option might be in the Quiz settings under "Multiple takes" to set "Store results" to "The newest". But there will be in information disclosure, at least for the last, so this is still not good. And I am not sure about the edge case on hight traffic whether the anonymous user will see it's own result or one of another anonymous user submitted slightly after the result will be returned.

Comments

dkane’s picture

I'm sorry for bumping this. I just wanted to make sure that I am posting this question in the right place. Should I request help from the general forum instead?

Thanks!

David

webservant316’s picture

did you figure this out?

also I am trying to create a view to list all the quizzes and display the quiz results for the current logged in / authenticated user. sounds like you have that figured out. how do I do that?

mithun.08’s picture

Any solution for the above issue. How can I achieve this ?

osopolar’s picture

Issue summary: View changes

Updated issue by removing not relevant information.

osopolar’s picture

Version: 6.x-4.1 » 7.x-5.x-dev
Component: User interface » Code - Quiz core
Category: Support request » Feature request

Actually this is a feature request, so it should be moved to version 7.x-5.x (see #2280951: Issue queue cleanup).

This would be another way to solve the problem: #826670: Option to store no results?