Don't See What You're Looking For?

Help Us Improve

Browse by Collection

Skip to end of metadata
Go to start of metadata

Tell me

A student may experience an access denied error when attempting to submit a test:
Access Denied Either you are not logged in or you do not have the appropriate privileges to perform this action. You may have access to other parts of the course.

What causes this error?

According to Blackboard, this is a known issue due to security requirements in our authentication settings.
  1. Harry starts a test in his History of Magic course in Blackboard.
  2. Next, he opens a new tab or window in the same browser and navigates to the myUMBC portal to access Blackboard
  3. By accessing Blackboard again through myUMBC, Harry has starts a completely new session, which kills the existing session.
  4. When Harry completes the test, he will get an error message:

    Access Denied
    Either you are not logged in or you do not have the appropriate privileges to perform this action.
    You may have access to other parts of the course.

  5. If Harry clicks cancel, he can get back to the test to start over. If he clicks Log In, he has to request a test reset. Either way, all test answers are lost

What does this mean?

Blackboard logs the second log-in attempt as:

Invalid cross-site request forgery nonce for request authenticity and exception thrown. May be an indicator of a cross-site request forgery attack.

Essentially, Blackboard knows Harry has already logged in to the system. By going through myUMBC again to log in, Harry is requesting a new session to "start over" in Blackboard, which tells the system to disconnect Harry from everything he is currently doing, including taking a test.

 

RECOMMENDATIONS FOR STUDENTS

Please do not open a new tab or browser window when taking a test in Blackboard. You will be disconnected.

Rate this Article

Feedback: Correct or Suggest an Article | Request Help