MDL-86960 mod_forum: Check user
This commit is contained in:
committed by
Mihail Geshoski
parent
8f31bda522
commit
1e54b2a86b
@@ -2300,6 +2300,12 @@ function mod_forum_rating_can_see_item_ratings($params) {
|
||||
$forum = $DB->get_record('forum', array('id' => $discussion->forum), '*', MUST_EXIST);
|
||||
$course = $DB->get_record('course', array('id' => $forum->course), '*', MUST_EXIST);
|
||||
$cm = get_coursemodule_from_instance('forum', $forum->id, $course->id , false, MUST_EXIST);
|
||||
$context = context_module::instance($cm->id);
|
||||
$ratingpermissions = forum_rating_permissions($context->id, 'mod_forum', 'post');
|
||||
$requiredpermission = ($post->userid != $USER->id) ? 'viewall' : 'view';
|
||||
if (!$ratingpermissions[$requiredpermission]) {
|
||||
return false;
|
||||
}
|
||||
|
||||
// Perform some final capability checks.
|
||||
if (!forum_user_can_see_post($forum, $discussion, $post, $USER, $cm)) {
|
||||
|
||||
Reference in New Issue
Block a user