MDL-64830 core_calendar: Do cap check on event edit form

This commit is contained in:
Shamim Rezaie
2019-03-05 04:17:42 +01:00
committed by Jenkins
parent 907b377e51
commit 2cebb87682
+5
View File
@@ -3561,6 +3561,11 @@ function calendar_output_fragment_event_form($args) {
$mform->set_data($data);
} else {
$event = calendar_event::load($eventid);
if (!calendar_edit_event_allowed($event)) {
print_error('nopermissiontoupdatecalendar');
}
$mapper = new \core_calendar\local\event\mappers\create_update_form_mapper();
$eventdata = $mapper->from_legacy_event_to_data($event);
$data = array_merge((array) $eventdata, $data);