MDL-86960 mod_forum: Check user

This commit is contained in:
Stefan Hanauska
2025-12-03 13:45:37 +08:00
committed by Mihail Geshoski
parent 8f31bda522
commit 1e54b2a86b
+6
View File
@@ -2300,6 +2300,12 @@ function mod_forum_rating_can_see_item_ratings($params) {
$forum = $DB->get_record('forum', array('id' => $discussion->forum), '*', MUST_EXIST);
$course = $DB->get_record('course', array('id' => $forum->course), '*', MUST_EXIST);
$cm = get_coursemodule_from_instance('forum', $forum->id, $course->id , false, MUST_EXIST);
$context = context_module::instance($cm->id);
$ratingpermissions = forum_rating_permissions($context->id, 'mod_forum', 'post');
$requiredpermission = ($post->userid != $USER->id) ? 'viewall' : 'view';
if (!$ratingpermissions[$requiredpermission]) {
return false;
}
// Perform some final capability checks.
if (!forum_user_can_see_post($forum, $discussion, $post, $USER, $cm)) {