Ci

.github/workflows/learninghub-moodle_Deploy_dev.yml

@@ -104,13 +104,19 @@ jobs:
 
       - name: Create PersistentVolume for theme
         run: kubectl apply -f kubectl/pv-definition-theme-dev.yml
+
+      - name: Create PersistentVolume for uploads
+        run: kubectl apply -f kubectl/pv-definition-uploads-dev.yml
 
       - name: Create PersistentVolumeClaim
         run: kubectl apply -f kubectl/pvc-definition-dev.yml
 
       - name: Create PersistentVolumeClaim for theme
         run: kubectl apply -f kubectl/pvc-definition-theme-dev.yml
 
+      - name: Create PersistentVolumeClaim for uploads
+        run: kubectl apply -f kubectl/pvc-definition-uploads-dev.yml
+
       - name: Attach ACR to cluster
         run: az aks update -n ${{ vars.AZURE_CLUSTER_NAME }} -g ${{ vars.AZURE_RESOURCE_GROUP_NAME }} --attach-acr ${{ vars.AZURE_CONTAINER_REGISTRY_NAME }}
         continue-on-error: true
@@ -188,6 +194,9 @@ jobs:
             rm -f $(basename $zipfile); \
           done
 
+      - name: Ensure uploads folder has correct permissions applied
+        run: chmod ugo+rwx ./webservice/rest/uploads
+
       - name: Build and push Docker image
         run: |
           docker build \

.github/workflows/learninghub-moodle_Deploy_pgvle.yml

@@ -104,13 +104,19 @@ jobs:
 
       - name: Create PersistentVolume for theme
         run: kubectl apply -f kubectl/pv-definition-theme-${{ vars.AZURE_ENVIRONMENT }}.yml
+
+      - name: Create PersistentVolume for uploads
+        run: kubectl apply -f kubectl/pv-definition-uploads-${{ vars.AZURE_ENVIRONMENT }}.yml
 
       - name: Create PersistentVolumeClaim
         run: kubectl apply -f kubectl/pvc-definition-${{ vars.AZURE_ENVIRONMENT }}.yml
 
       - name: Create PersistentVolumeClaim for theme
         run: kubectl apply -f kubectl/pvc-definition-theme-${{ vars.AZURE_ENVIRONMENT }}.yml
 
+      - name: Create PersistentVolumeClaim for uploads
+        run: kubectl apply -f kubectl/pvc-definition-uploads-${{ vars.AZURE_ENVIRONMENT }}.yml
+
       - name: Attach ACR to cluster
         run: az aks update -n ${{ vars.AZURE_CLUSTER_NAME }} -g ${{ vars.AZURE_RESOURCE_GROUP_NAME }} --attach-acr ${{ vars.AZURE_CONTAINER_REGISTRY_NAME }}
         continue-on-error: true
@@ -188,6 +194,9 @@ jobs:
             rm -f $(basename $zipfile); \
           done
 
+      - name: Ensure uploads folder has correct permissions applied
+        run: chmod ugo+rwx ./webservice/rest/uploads
+
       - name: Build and push Docker image
         run: |
           docker build -t ${{ vars.AZURE_CONTAINER_REGISTRY_NAME }}.azurecr.io/${{ vars.DOCKER_IMAGE_NAME }}:latest . 

.github/workflows/learninghub-moodle_Deploy_prod.yml

@@ -149,13 +149,19 @@ jobs:
 
       - name: Create PersistentVolume for theme
         run: kubectl apply -f kubectl/pv-definition-theme-prod.yml
+
+      - name: Create PersistentVolume for uploads
+        run: kubectl apply -f kubectl/pv-definition-uploads-prod.yml
 
       - name: Create PersistentVolumeClaim
         run: kubectl apply -f kubectl/pvc-definition-prod.yml
 
       - name: Create PersistentVolumeClaim for theme
         run: kubectl apply -f kubectl/pvc-definition-theme-prod.yml
 
+      - name: Create PersistentVolumeClaim for uploads
+        run: kubectl apply -f kubectl/pvc-definition-uploads-prod.yml
+
       - name: Attach ACR to cluster
         run: az aks update -n ${{ vars.AZURE_CLUSTER_NAME }} -g ${{ vars.AZURE_RESOURCE_GROUP_NAME }} --attach-acr ${{ vars.AZURE_CONTAINER_REGISTRY_NAME }}
         continue-on-error: true
@@ -233,6 +239,9 @@ jobs:
             rm -f $(basename $zipfile); \
           done
 
+      - name: Ensure uploads folder has correct permissions applied
+        run: chmod ugo+rwx ./webservice/rest/uploads
+
       - name: Build and push Docker image
         run: |
           docker build \

.github/workflows/learninghub-moodle_Deploy_test.yml

@@ -104,13 +104,19 @@ jobs:
 
       - name: Create PersistentVolume for theme
         run: kubectl apply -f kubectl/pv-definition-theme-test.yml
+
+      - name: Create PersistentVolume for uploads
+        run: kubectl apply -f kubectl/pv-definition-uploads-test.yml
 
       - name: Create PersistentVolumeClaim
         run: kubectl apply -f kubectl/pvc-definition-test.yml
 
       - name: Create PersistentVolumeClaim for theme
         run: kubectl apply -f kubectl/pvc-definition-theme-test.yml
 
+      - name: Create PersistentVolumeClaim for uploads
+        run: kubectl apply -f kubectl/pvc-definition-uploads-test.yml
+
       - name: Attach ACR to cluster
         run: az aks update -n ${{ vars.AZURE_CLUSTER_NAME }} -g ${{ vars.AZURE_RESOURCE_GROUP_NAME }} --attach-acr ${{ vars.AZURE_CONTAINER_REGISTRY_NAME }}
         continue-on-error: true
@@ -188,6 +194,9 @@ jobs:
             rm -f $(basename $zipfile); \
           done
 
+      - name: Ensure uploads folder has correct permissions applied
+        run: chmod ugo+rwx ./webservice/rest/uploads
+
       - name: Build and push Docker image
         run: |
           docker build -t ${{ vars.AZURE_CONTAINER_REGISTRY_NAME }}.azurecr.io/${{ vars.DOCKER_IMAGE_NAME }}:latest . 

.github/workflows/learninghub-moodle_Test.yml

@@ -1,6 +1,6 @@
 name: Run tests for LearningHub-Moodle
 on:
-  pull_request:
+  workflow_dispatch:
 
 permissions:
   id-token: write

Terraform/dev/main.tf

@@ -23,6 +23,12 @@ resource "azurerm_storage_share" "storage_share_theme" {
   quota                = var.StorageQuota
 }
 
+resource "azurerm_storage_share" "storage_share_uploads" {
+  name                 = "moodlerestuploads"
+  storage_account_name = azurerm_storage_account.storage_account.name
+  quota                = var.StorageQuota
+}
+
 resource "azurerm_storage_container" "assessment_container" {
   name                  = "assessmentstoragecontainer"
   storage_account_name  = azurerm_storage_account.storage_account.name

Terraform/pgvle/main.tf

@@ -23,6 +23,12 @@ resource "azurerm_storage_share" "storage_share_theme" {
   quota                = var.StorageQuota
 }
 
+resource "azurerm_storage_share" "storage_share_uploads" {
+  name                 = "moodlerestuploads"
+  storage_account_name = azurerm_storage_account.storage_account.name
+  quota                = var.StorageQuota
+}
+
 resource "azurerm_storage_container" "assessment_container" {
   name                  = "assessmentstoragecontainer"
   storage_account_name  = azurerm_storage_account.storage_account.name

Terraform/prod/main.tf

@@ -23,6 +23,12 @@ resource "azurerm_storage_share" "storage_share_theme" {
   quota                = var.StorageQuota
 }
 
+resource "azurerm_storage_share" "storage_share_uploads" {
+  name                 = "moodlerestuploads"
+  storage_account_name = azurerm_storage_account.storage_account.name
+  quota                = var.StorageQuota
+}
+
 resource "azurerm_storage_container" "assessment_container" {
   name                  = "assessmentstoragecontainer"
   storage_account_name  = azurerm_storage_account.storage_account.name

Terraform/test/main.tf

@@ -23,6 +23,12 @@ resource "azurerm_storage_share" "storage_share_theme" {
   quota                = var.StorageQuota
 }
 
+resource "azurerm_storage_share" "storage_share_uploads" {
+  name                 = "moodlerestuploads"
+  storage_account_name = azurerm_storage_account.storage_account.name
+  quota                = var.StorageQuota
+}
+
 resource "azurerm_storage_container" "assessment_container" {
   name                  = "assessmentstoragecontainer"
   storage_account_name  = azurerm_storage_account.storage_account.name

auth/oidc/classes/privacy/provider.php

@@ -76,6 +76,11 @@ public static function get_metadata(collection $collection): collection {
                 'refreshtoken',
                 'idtoken',
             ],
+			'auth_oidc_sid' => [ // ✅ Add this block
+        'userid',
+        'sid',
+        'timecreated',
+    ],
         ];
 
         foreach ($tables as $table => $fields) {

auth/oidc/lang/en/auth_oidc.php

@@ -494,6 +494,10 @@
 $string['update_username_results'] = 'Update username results';
 $string['new_username'] = 'New username';
 $string['missing_idp_type'] = 'This configuration is only available if an IdP type is configured.';
+$string['privacy:metadata:auth_oidc_sid'] = 'Stores OIDC session identifiers linked to users.';
+$string['privacy:metadata:auth_oidc_sid:userid'] = 'The ID of the user associated with the session.';
+$string['privacy:metadata:auth_oidc_sid:sid'] = 'The session ID from the OIDC provider.';
+$string['privacy:metadata:auth_oidc_sid:timecreated'] = 'The time the session ID was created.';
 
 // phpcs:enable moodle.Files.LangFilesOrdering.IncorrectOrder
 // phpcs:enable moodle.Files.LangFilesOrdering.UnexpectedComment

config.php

@@ -32,6 +32,9 @@
 $CFG->phpunit_prefix = 'phpu_';
 $CFG->phpunit_dataroot = 'phpu_moodledata';
 
+$CFG->recordrtc_audio = false;
+$CFG->recordrtc_video = false;
+
 require_once(__DIR__ . '/lib/setup.php');
 
 // There is no php closing tag in this file,

kubectl/deployment-dev.yml

@@ -32,10 +32,15 @@ spec:
           readOnly: false
         - name: moodletheme
           mountPath: /var/www/html/theme
+        - name: moodlerestuploads
+          mountPath: /var/www/html/webservice/rest/uploads
       volumes:
       - name: moodledata
         persistentVolumeClaim:
           claimName: moodledataclaim
       - name: moodletheme
         persistentVolumeClaim:
-          claimName: moodlethemeclaim
+          claimName: moodlethemeclaim
+      - name: moodlerestuploads
+        persistentVolumeClaim:
+          claimName: moodleuploadsclaim

kubectl/pv-definition-prod.yml

@@ -16,6 +16,7 @@ spec:
     volumeHandle: "moodleCluster#learninghubmoodleprod#moodledata"  # make sure this volumeid is unique for every identical share in the cluster
     volumeAttributes:
       shareName: moodledata
+      server: learninghubmoodleprod.privatelink.file.core.windows.net
     nodeStageSecretRef:
       name: azure-secret
       namespace: learninghubmoodle

kubectl/pv-definition-uploads-dev.yml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: file.csi.azure.com
+  name: moodlerestuploads
+spec:
+  capacity:
+    storage: 5Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: azurefile-csi
+  csi:
+    driver: file.csi.azure.com
+    volumeHandle: "moodleCluster#learninghubmoodledev#moodlerestuploads"  # make sure this volumeid is unique for every identical share in the cluster
+    volumeAttributes:
+      shareName: moodlerestuploads
+      server: learninghubmoodledev.privatelink.file.core.windows.net
+    nodeStageSecretRef:
+      name: azure-secret
+      namespace: learninghubmoodle
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=0
+    - gid=0
+    - mfsymlinks
+    - cache=strict
+    - nosharesock
+    - nobrl  # disable sending byte range lock requests to the server and for applications which have challenges with posix locks

kubectl/pv-definition-uploads-pgvle.yml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: file.csi.azure.com
+  name: moodlerestuploads
+spec:
+  capacity:
+    storage: 5Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: azurefile-csi
+  csi:
+    driver: file.csi.azure.com
+    volumeHandle: "moodleCluster#learninghubmoodlepgvle#moodlerestuploads"  # make sure this volumeid is unique for every identical share in the cluster
+    volumeAttributes:
+      shareName: moodlerestuploads
+      server: learninghubmoodledev.privatelink.file.core.windows.net
+    nodeStageSecretRef:
+      name: azure-secret
+      namespace: learninghubmoodle
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=0
+    - gid=0
+    - mfsymlinks
+    - cache=strict
+    - nosharesock
+    - nobrl  # disable sending byte range lock requests to the server and for applications which have challenges with posix locks

kubectl/pv-definition-uploads-prod.yml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: file.csi.azure.com
+  name: moodlerestuploads
+spec:
+  capacity:
+    storage: 5Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: azurefile-csi
+  csi:
+    driver: file.csi.azure.com
+    volumeHandle: "moodleCluster#learninghubmoodleprod#moodlerestuploads"  # make sure this volumeid is unique for every identical share in the cluster
+    volumeAttributes:
+      shareName: moodlerestuploads
+      server: learninghubmoodleprod.privatelink.file.core.windows.net
+    nodeStageSecretRef:
+      name: azure-secret
+      namespace: learninghubmoodle
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=0
+    - gid=0
+    - mfsymlinks
+    - cache=strict
+    - nosharesock
+    - nobrl  # disable sending byte range lock requests to the server and for applications which have challenges with posix locks

kubectl/pv-definition-uploads-test.yml

@@ -0,0 +1,31 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  annotations:
+    pv.kubernetes.io/provisioned-by: file.csi.azure.com
+  name: moodlerestuploads
+spec:
+  capacity:
+    storage: 5Gi
+  accessModes:
+    - ReadWriteMany
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: azurefile-csi
+  csi:
+    driver: file.csi.azure.com
+    volumeHandle: "moodleCluster#learninghubmoodletest#moodlerestuploads"  # make sure this volumeid is unique for every identical share in the cluster
+    volumeAttributes:
+      shareName: moodlerestuploads
+      server: learninghubmoodletest.privatelink.file.core.windows.net
+    nodeStageSecretRef:
+      name: azure-secret
+      namespace: learninghubmoodle
+  mountOptions:
+    - dir_mode=0777
+    - file_mode=0777
+    - uid=0
+    - gid=0
+    - mfsymlinks
+    - cache=strict
+    - nosharesock
+    - nobrl  # disable sending byte range lock requests to the server and for applications which have challenges with posix locks

kubectl/pvc-definition-uploads-dev.yml

@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: moodleuploadsclaim
+  namespace: learninghubmoodle
+spec:
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 5Gi
+  storageClassName: azurefile-csi
+  volumeName: moodlerestuploads