L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-60339 course: Course editing only checked against site:manageblocks.

Browse Source 
Add in additional capabilities to the page. When all_editing_caps is called it'll check against
moodle/site:manageblocks & added capabilities. If moodle/site:manageblocks
was not set the user would have trouble editing the page.
This commit is contained in:
Mathew May
2019-03-22 13:47:16 +08:00
parent 3271c39c74
commit 3828422d82
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
course/externallib.php
+22
View File
@@ -3539,6 +3539,17 @@ class core_course_external extends external_api {
$id = $params['id'];
$sectionreturn = $params['sectionreturn'];
// Set of permissions an editing user may have.
$contextarray = [
'moodle/course:update',
'moodle/course:manageactivities',
'moodle/course:activityvisibility',
'moodle/course:sectionvisibility',
'moodle/course:movesections',
'moodle/course:setcurrentsection',
];
$PAGE->set_other_editing_capability($contextarray);
list($course, $cm) = get_course_and_cm_from_cmid($id);
$modcontext = context_module::instance($cm->id);
$coursecontext = context_course::instance($course->id);
@@ -3646,6 +3657,17 @@ class core_course_external extends external_api {
$id = $params['id'];
$sectionreturn = $params['sectionreturn'];
// Set of permissions an editing user may have.
$contextarray = [
'moodle/course:update',
'moodle/course:manageactivities',
'moodle/course:activityvisibility',
'moodle/course:sectionvisibility',
'moodle/course:movesections',
'moodle/course:setcurrentsection',
];
$PAGE->set_other_editing_capability($contextarray);
// Validate access to the course (note, this is html for the course view page, we don't validate access to the module).
list($course, $cm) = get_course_and_cm_from_cmid($id);
self::validate_context(context_course::instance($course->id));