MDL-64528 core_completion: prevent toggling completion in frozen context

2019-01-12 07:37:21 -08:00
parent 38a1b4f203
commit 7868aab181
5 changed files with 13 additions and 1 deletions
@@ -139,6 +139,7 @@ $course = $DB->get_record('course', array('id'=>$cm->course), '*', MUST_EXIST);

 // Check user is logged in
 require_login($course, false, $cm);
+require_capability('moodle/course:togglecompletion', context_module::instance($cmid));

 if (isguestuser() or !confirm_sesskey()) {
    print_error('error');