MDL-37026 - lib: The function user_can_assign() returns true for admins.

2012-12-06 10:52:09 +08:00
parent 03953061ca
commit 3370f216a2
1 changed files with 7 additions and 2 deletions
@@ -2956,8 +2956,13 @@ function get_user_roles_in_course($userid, $courseid) {
 function user_can_assign(context $context, $targetroleid) {
    global $DB;

-    // first check if user has override capability
-    // if not return false;
+    // First check to see if the user is a site administrator.
+    if (is_siteadmin()) {
+        return true;
+    }
+
+    // Check if user has override capability.
+    // If not return false.
    if (!has_capability('moodle/role:assign', $context)) {
        return false;
    }