Report Card Options Allows Saving to GRP Table Without GRP Permissions
On the Report Card Options page, users can customize headers for Grade Report (GRD) marks. These customizations are saved into the Grade Report Mark Headings (GRP) table for any selected Grading Periods.
Currently, users who have GRD update permissions—but do not have GRP update permissions—are still able to save changes to the GRP table.
This creates a permissions bypass where users can modify GRP data without having the appropriate GRP access. We need the GRP permissions to be enforced.
5
votes
Hello, this work item has been completed and was released on 4/1/26. Here are the relevant revision notes:
- Grade Reporting > Configurations > Grading Periods: Grading Periods for Grading Snapshots now allow users to define the heading and subheading that will print on the student's Report Card.
- Reports > Grade Report Card: The header and sub-header below the Mark drop-down are now read-only and are automatically populated from the Multiple Mark Headings and Descriptions page (GRP) for M1-12 or the Grading Periods page (GPD) for Grading Snapshots. NOTE: If your schools report Grading Snapshots on the Report Card, they will need to modify those Grading Periods to include a mark header and sub header to print on the Report Card.
