MDL-49453 webservices: Validate section number (exists and visibility)

2015-04-02 11:06:24 +02:00
parent 605324fb10
commit 4dfef5e9ef
1 changed files with 12 additions and 0 deletions
@@ -2087,6 +2087,18 @@ class core_course_external extends external_api {
        $context = context_course::instance($course->id);
        self::validate_context($context);

+        if (!empty($params['sectionnumber'])) {
+
+            // Get section details and check it exists.
+            $modinfo = get_fast_modinfo($course);
+            $coursesection = $modinfo->get_section_info($params['sectionnumber'], MUST_EXIST);
+
+            // Check user is allowed to see it.
+            if (!$coursesection->uservisible) {
+                require_capability('moodle/course:viewhiddensections', $context);
+            }
+        }
+
        course_view($context, $params['sectionnumber']);

        $result = array();