Cluster Tree does not appear to be filtering out User Sets based on permissions

[mrscottelliott]

The User Set selection tree in the 'Course Completion By User Set Report' doesn't seem to be aware of permission restrictions like the dropdown is.

I think I found the offending code and a fix. At least it seems to do the trick for me!

Line 582 of elis/program/lib/filtering/clustertree.php

    if ($clusters = cluster_get_listing('priority, name', 'ASC', 0, 0, '', '', array('parent' => 0))) {

Needs to add context checking to limit what user sets are visible. The following seems to do the trick.

    if ($clusters = cluster_get_listing('priority, name', 'ASC', 0, 0, '', '', array('parent' => 0, 'contexts' => $context_result))) {

I'm using the following versions of ELIS
ELIS Program Manager Version: 2.5.1.5 (Build: 20131203)
ELIS Version: 2.5.1.5 (Build: 20131203)

If I did indeed find the problem and the appropriate location for a fix, it looks like it could be used on more recent versions as well.

Hope this helps!

Scott