In PebblePad, accessing a user's account requires their express permission, with them granting temporary access and retaining full control. To therefore prevent Canvas administrators from circumventing this using their Canvas permissions, the following will disable the Canvas impersonation feature.
How to set-up
- Login to Canvas with an account that has Administrator permissions.
- Navigate to the account administration area.
- Click Settings.
- Click the Apps tab.
- Click View App Configurations button.
- Click on the cog icon next to PebblePad and click Edit
- In the custom field text box add the following entry:
originating_user_id=$Canvas.masqueradingUser.id
8. Click the Submit button to confirm.
How to test
- Navigate to a course from the Courses menu.
- Click the People link in the side navigation bar.
- Click on the (hyperlinked) student name you wish to impersonate.
- In the side pane, click Act as user then the Proceed button.
- In the course's main (left-hand) menu, click on PebblePad link to go to Pebble+.
- A dashboard should not appear, but instead display an error message
