L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FIxes so that no-one can "login as" users who have "doanything". MDL-8411

Browse Source
This commit is contained in:
moodler
2007-02-13 08:30:25 +00:00
parent 593d5992c0
commit 08f4e03f53
4 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
user/view.php
+2 -1
View File
@@ -372,7 +372,8 @@
}
}
if ($USER->id != $user->id && has_capability('moodle/user:loginas', $coursecontext)) {
if ($USER->id != $user->id && has_capability('moodle/user:loginas', $coursecontext) &&
! has_capability('moodle/site:doanything', $coursecontext, $user->id, false)) {
echo '<td nowrap="nowrap"><form action="'.$CFG->wwwroot.'/course/loginas.php" method="get">';
echo '<input type="hidden" name="id" value="'.$course->id.'" />';
echo '<input type="hidden" name="user" value="'.$user->id.'" />';