insert calls to require_capability()
This commit is contained in:
@@ -46,9 +46,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:viewreports', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
require_capability('mod/feedback:viewreports', $context);
|
||||
|
||||
//buffering any output
|
||||
//this prevents some output before the excel-header will be send
|
||||
|
||||
@@ -41,9 +41,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:deletesubmissions', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
require_capability('mod/feedback:deletesubmissions', $context);
|
||||
|
||||
$mform = new mod_feedback_delete_completed_form();
|
||||
$newformdata = array('id'=>$id,
|
||||
|
||||
@@ -36,9 +36,7 @@
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:edititems', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
require_capability('mod/feedback:edititems', $context);
|
||||
|
||||
$mform = new mod_feedback_delete_item_form();
|
||||
$newformdata = array('id'=>$id,
|
||||
|
||||
@@ -62,9 +62,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:deletetemplate', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
require_capability('mod/feedback:deletetemplate', $context);
|
||||
|
||||
$mform = new mod_feedback_delete_template_form();
|
||||
$newformdata = array('id'=>$id,
|
||||
|
||||
@@ -52,9 +52,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:edititems', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
require_capability('mod/feedback:edititems', $context);
|
||||
|
||||
//move up/down items
|
||||
if($moveupitem){
|
||||
|
||||
@@ -58,9 +58,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:edititems', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
require_capability('mod/feedback:edititems', $context);
|
||||
|
||||
//if the typ is pagebreak so the item will be saved directly
|
||||
if($typ == 'pagebreak') {
|
||||
|
||||
@@ -41,9 +41,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:edititems', $context)){
|
||||
print_error('invalidaction');
|
||||
}
|
||||
require_capability('mod/feedback:edititems', $context);
|
||||
|
||||
if ($action == 'exportfile') {
|
||||
if(!$exportdata = feedback_get_xml_data($feedback->id)) {
|
||||
|
||||
@@ -49,9 +49,7 @@
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:edititems', $context)){
|
||||
print_error('invalidaction');
|
||||
}
|
||||
require_capability('mod/feedback:edititems', $context);
|
||||
|
||||
unset($filename);
|
||||
if ($action == 'choosefile' AND confirm_sesskey() ) {
|
||||
|
||||
@@ -56,9 +56,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if (!has_capability('mod/feedback:mapcourse', $context)) {
|
||||
print_error('invalidaccess');
|
||||
}
|
||||
require_capability('mod/feedback:mapcourse', $context);
|
||||
|
||||
if ($coursefilter) {
|
||||
$map->feedbackid = $feedback->id;
|
||||
|
||||
@@ -37,9 +37,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:edititems', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
require_capability('mod/feedback:edititems', $context);
|
||||
|
||||
/// Print the page header
|
||||
$strfeedbacks = get_string("modulenameplural", "feedback");
|
||||
|
||||
@@ -54,9 +54,7 @@ if(($formdata = data_submitted()) AND !confirm_sesskey()) {
|
||||
print_error('invalidsesskey');
|
||||
}
|
||||
|
||||
if(!has_capability('mod/feedback:viewreports', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
require_capability('mod/feedback:viewreports', $context);
|
||||
|
||||
////////////////////////////////////////////////////////
|
||||
//get the responses of given user
|
||||
|
||||
@@ -47,10 +47,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:viewreports', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
|
||||
require_capability('mod/feedback:viewreports', $context);
|
||||
|
||||
//get the completeds
|
||||
// if a new anonymous record has not been assigned a random response number
|
||||
|
||||
@@ -0,0 +1,9 @@
|
||||
/* styles using by feedback */
|
||||
.feedback_required_mark {
|
||||
color: #FF0000;
|
||||
}
|
||||
|
||||
.feedback_switchrequired img{
|
||||
}
|
||||
|
||||
|
||||
@@ -38,10 +38,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
print_error('badcontext');
|
||||
}
|
||||
|
||||
if (!has_capability('mod/feedback:mapcourse', $context)) {
|
||||
print_error('invalidaccess');
|
||||
}
|
||||
|
||||
require_capability('mod/feedback:mapcourse', $context);
|
||||
|
||||
// cleanup all lost entries after deleting courses or feedbacks
|
||||
feedback_clean_up_sitecourse_map();
|
||||
|
||||
@@ -46,9 +46,7 @@ if (!$context = get_context_instance(CONTEXT_MODULE, $cm->id)) {
|
||||
|
||||
require_login($course->id, true, $cm);
|
||||
|
||||
if(!has_capability('mod/feedback:edititems', $context)){
|
||||
print_error('error');
|
||||
}
|
||||
require_capability('mod/feedback:edititems', $context);
|
||||
|
||||
$mform = new mod_feedback_use_templ_form();
|
||||
$newformdata = array('id'=>$id,
|
||||
|
||||
Reference in New Issue
Block a user