L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-45760 make sure to check permission before setting header

Browse Source
This commit is contained in:
Marina Glancy
2014-07-07 15:06:40 +01:00
committed by Dan Poltawski
parent 6eaf5ec8e3
commit 2ca9e09dab
2 changed files with 15 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
notes/index.php
+5 -4
View File
@@ -15,6 +15,10 @@ $userid = optional_param('user', 0, PARAM_INT);
$filtertype = optional_param('filtertype', '', PARAM_ALPHA);
$filterselect = optional_param('filterselect', 0, PARAM_INT);
if (empty($CFG->enablenotes)) {
print_error('notesdisabled', 'notes');
}
$url = new moodle_url('/notes/index.php');
if ($courseid != SITEID) {
$url->param('course', $courseid);
@@ -67,6 +71,7 @@ if ($course->id == SITEID) {
} else {
$coursecontext = context_course::instance($course->id); // Course context
}
require_capability('moodle/notes:view', $coursecontext);
$systemcontext = context_system::instance(); // SYSTEM context
// Trigger event.
@@ -76,10 +81,6 @@ $event = \core\event\notes_viewed::create(array(
));
$event->trigger();
if (empty($CFG->enablenotes)) {
print_error('notesdisabled', 'notes');
}
$strnotes = get_string('notes', 'notes');
if ($userid) {
$PAGE->set_context(context_user::instance($user->id));