MDL-24958 - bad permission check on anonymous feedbacks

2010-10-31 22:05:57 +00:00
parent 8f609a37cf
commit 8d8e6694c8
3 changed files with 5 additions and 1 deletions
@@ -40,6 +40,8 @@ if(has_capability('mod/feedback:complete', $context)) {

 if(isset($CFG->feedback_allowfullanonymous)
            AND $CFG->feedback_allowfullanonymous
+            AND $course->id == SITEID
+            AND (!$courseid OR $courseid == SITEID)
            AND $feedback->anonymous == FEEDBACK_ANONYMOUS_YES ) {
    $feedback_complete_cap = true;
 }