L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-62062 tool_policy: Avoid access to consent page after agreeding

Browse Source 
Once the policies have been accepted, only users with permission to
revoke them will be able to access again to the user consent page.
This commit is contained in:
Sara Arjona
2018-05-03 13:59:21 +02:00
parent 446d8483a3
commit 3d34aa5c29
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin/tool/policy/classes/output/page_agreedocs.php
+5 -3
View File
@@ -237,13 +237,13 @@ class page_agreedocs implements renderable, templatable {
* Redirect to $SESSION->wantsurl if defined or to $CFG->wwwroot if not.
*/
protected function redirect_to_previous_url() {
global $SESSION, $CFG;
global $SESSION;
if (!empty($SESSION->wantsurl)) {
$returnurl = $SESSION->wantsurl;
unset($SESSION->wantsurl);
} else {
$returnurl = $CFG->wwwroot.'/';
$returnurl = (new moodle_url('/admin/tool/policy/user.php'))->out();
}
redirect($returnurl);
@@ -278,7 +278,9 @@ class page_agreedocs implements renderable, templatable {
// and $SESSION->wantsurl is defined, redirect to the return page.
$hasagreedsignupuser = empty($USER->id) && $this->signupuserpolicyagreed;
$hasagreedloggeduser = $USER->id == $userid && !empty($USER->policyagreed);
if (!is_siteadmin() && ($hasagreedsignupuser || ($hasagreedloggeduser && !empty($SESSION->wantsurl)))) {
$canrevoke = api::can_revoke_policies($USER->id);
if (!is_siteadmin() && ($hasagreedsignupuser ||
($hasagreedloggeduser && !$canrevoke))) {
$this->redirect_to_previous_url();
}