From 031220a0091d52f04ca5c73a4ce6b4786e7f85e8 Mon Sep 17 00:00:00 2001
From: Paul Holden <paulh@moodle.com>
Date: Mon, 27 Nov 2023 20:35:33 +0000
Subject: [PATCH] MDL-80268 badges: require capability to view awarded badges.

---
 badges/recipients.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/badges/recipients.php b/badges/recipients.php
index 0dce38df78c..0f40c1c2ce2 100644
--- a/badges/recipients.php
+++ b/badges/recipients.php
@@ -54,6 +54,8 @@ $badge = new badge($badgeid);
 $context = $badge->get_context();
 $navurl = new moodle_url('/badges/index.php', array('type' => $badge->type));
 
+require_capability('moodle/badges:viewawarded', $context);
+
 if ($badge->type == BADGE_TYPE_COURSE) {
     if (empty($CFG->badges_allowcoursebadges)) {
         print_error('coursebadgesdisabled', 'badges');