Description
When a Node Administrator accesses the Learning Object Repository (LOR) for content creation within their assigned node, the Content Market displays LTI tools that are scoped to other nodes. Tools that have been disabled for the administrator's node through Institutional Hierarchy settings continue to appear in the Content Market. In some cases, these tools are not only visible but can also be launched and used, bypassing the node-level availability restrictions configured by administrators.
Steps to Replicate
Log in to Blackboard Learn as an administrator
Navigate to System Admin > Courses > Create an Ultra Course
Navigate to System Admin > Institutional Hierarchy and create a node
Navigate to System Admin > Users and create a test user
Assign the test user a Staff role and associate the user with the node created previously
Open the node from the Institutional Hierarchy
Under Administrators, add the test user and assign the Course Administrator role
Under Tools, disable an LTI tool for the node
Log in as the test user
Navigate to Tools > Learning Object Repository and access the repository for the assigned node
Select Create > Content > Insert Content > Content Market
Review the list of available LTI tools
Observed Behavior:
LTI tools disabled at the node level remain visible in the Content Market. In several cases, these tools are also accessible to the Node Administrator.
Expected Behavior:
Only LTI tools enabled for the current node are displayed in the Content Market, and tools disabled through Institutional Hierarchy are neither visible nor accessible.
Affected Versions
Learn 4000.15.0
Learn 4000.17.0
Target Release
SaaS Fixed (4001.2.0)
