From 9658298c2e89210c46dda4be29c02de3d008f4a5 Mon Sep 17 00:00:00 2001 From: tjhunt Date: Wed, 25 Mar 2009 01:41:05 +0000 Subject: [PATCH] accesslib: MDL-18604 you should never be allowed to switch to a role with moodle/site:doanything. The SQL in get_assignable_roles_for_switchrole was wrong. --- lib/accesslib.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/accesslib.php b/lib/accesslib.php index 18d0faa3c4b..61abc43e14b 100755 --- a/lib/accesslib.php +++ b/lib/accesslib.php @@ -4262,7 +4262,9 @@ function get_assignable_roles_for_switchrole($context, $field='name', $rolenamed {$CFG->prefix}role_capabilities rc WHERE ra.userid = $USER->id AND ra.contextid IN ($contexts) AND raa.roleid = ra.roleid AND r.id = raa.allowassign - AND r.id = rc.roleid AND rc.capability = 'moodle/course:view' AND rc.capability != 'moodle/site:doanything' + AND r.id = rc.roleid AND rc.capability = 'moodle/course:view' + AND NOT EXISTS (SELECT 1 FROM {$CFG->prefix}role_capabilities irc + WHERE irc.roleid = r.id AND irc.capability = 'moodle/site:doanything') ) inline_view WHERE ro.id = inline_view.id ORDER BY ro.sortorder ASC")) {