We have identified an issue whereby a student can view another student's grades if the first student does not close the browser after they log out. It would be good to know if this is affecting other institutions using LDAP authentication.
To test this on your system, log in as a student who has at least one grade available and access My Grades via the Global Navigation. You should see the grades for that student. Now click log out, but do not close the browser. Log in with a second student account who also has a grade available and view My Grades from the Global Navigation. Do you see two grades listed for the same assignment in the same course?
It would seem to us that the session cookies aren't being cleared and we are working with Blackboard to identify why. Closing the browser and/or logging off the computer does stop this from occurring.
I'd be grateful if some of you could test this out and let me know whether it occurs on your system too.