Behind the Blackboard! Users API Shows Data to Students - Behind the Blackboard Skip Navigation
Download PDF  Icon Download PDF    Print article

Users API Shows Data to Students

Date Published: Feb 21,2019

CategoryPlanned First Fix Release:Functioning as Designed; Product:Users & Role Management,Authentication & Security,Application and Webserver; Version:Learn 9.1 Q4 2017 (3300.0.0),Learn 9.1 Q2 2018 (3400.0.0),Learn 9.1 Q4 2018 (3500.0.0),Learn 9.1 Q2 2019 (3700.0.0),SaaS
Article No.: 000050249
Blackboard Learn
Service Pack(s):
Learn 9.1 Q4 2017 (3300.0.0), Learn 9.1 Q2 2018 (3400.0.0), Learn 9.1 Q4 2018 (3500.0.0), Learn 9.1 Q2 2019 (3700.0.0), SaaS
Issue Description:
The Users API exposes User attributes for authenticated non-privileged Users such as Students.
Steps to Repeat:
  1. Log into Blackboard Learn as a Student
  2. Access the Users API
    • .../learn/api/public/v1/users
Expected Behavior:
User information is not listed

Observed Behavior:
User information is listed

Target Release:

Functioning as Designed

Patch Available:


The information contained in the Knowledge Base was written and/or verified by Blackboard Support. It is approved for client use. Nothing in the Knowledge Base shall be deemed to modify your license in any way to any Blackboard product. If you have comments, questions, or concerns, please send an email to © 2019 Blackboard Inc. All rights reserved