From 5226cc8a507d18682b52298fbd02e9e462bf5ed9 Mon Sep 17 00:00:00 2001
From: Shamim Rezaie <shamim@moodle.com>
Date: Wed, 20 Feb 2019 14:54:53 +1100
Subject: [PATCH] MDL-64830 core_calendar: Do cap check on event edit form

---
 calendar/lib.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/calendar/lib.php b/calendar/lib.php
index 5775b13e3b8..fd6078a38be 100644
--- a/calendar/lib.php
+++ b/calendar/lib.php
@@ -3512,6 +3512,11 @@ function calendar_output_fragment_event_form($args) {
         $mform->set_data($data);
     } else {
         $event = calendar_event::load($eventid);
+
+        if (!calendar_edit_event_allowed($event)) {
+            print_error('nopermissiontoupdatecalendar');
+        }
+
         $mapper = new \core_calendar\local\event\mappers\create_update_form_mapper();
         $eventdata = $mapper->from_legacy_event_to_data($event);
         $data = array_merge((array) $eventdata, $data);