MDL-21830 Prevent users from viewing names of all other site users - only teachers with role assign see the full name of not enrolled users when trying to access the profile

2010-03-18 22:14:53 +00:00
parent 4bbeff3357
commit 4597ce9ca5
1 changed files with 1 additions and 1 deletions
@@ -77,7 +77,7 @@
            }

            if (!has_capability('moodle/course:view', $coursecontext, $user->id, false)) {
-                if (has_capability('moodle/course:view', $coursecontext)) {
+                if (has_capability('moodle/role:assign', $coursecontext)) {
                    print_header("$strpersonalprofile: ", "$strpersonalprofile: ",
                                     "<a href=\"../course/view.php?id=$course->id\">$course->shortname</a> ->
                                  <a href=\"index.php?id=$course->id\">$strparticipants</a> -> $fullname",