MDL-79976 mod_feedback: Check group for response

Check the teacher's group membership if group mode is SEPARATEGROUPS prior to showing or deleting responses.
2025-02-05 18:13:02 +01:00
parent 0f5a96ff3e
commit 045669a9bf
2 changed files with 237 additions and 1 deletions
@@ -92,6 +92,11 @@ class mod_feedback_completion extends mod_feedback_structure {
                $params['userid'] = $nonanonymouseuserid;
            }
            $this->completed = $DB->get_record('feedback_completed', $params, '*', MUST_EXIST);
+
+            if (!groups_user_groups_visible($this->feedback->course, $this->completed->userid, $cm)) {
+                throw new moodle_exception('nopermissiontoshow');
+            }
+
            $this->courseid = $this->completed->courseid;
        }
    }
@@ -761,4 +766,4 @@ class mod_feedback_completion extends mod_feedback_structure {
        $SESSION->feedback->is_started = true;
        return $this->form->render();
    }
-}
+}