Hi, We've discovered that in My Account > My Profile, the student can update their details such as their title, their names on their own from the portal and it write back to Student Manager database and user profile database, without notification or audit trails. We found this a danger for the database. Would you please make this section Read-only? Thank you.
We also just spotted the same flaw in the new Student Portal Cloud when the "My Profile" is enabled in My Account tab, students are able to update their Surname & Forename, and it will be written back to iSAMs (Student Manager/User Account) without any notification and historical audit. We found it as a serious tasking action when it could impact on students' identification within the database, and closed this feature immediately