From ea2fa324d7d8e92d80476982134803a741ff8e21 Mon Sep 17 00:00:00 2001 From: Juan Leyva Date: Thu, 16 Apr 2015 21:31:22 +0200 Subject: [PATCH] MDL-49902 forum: Add missing capability check in mod_forum_view_forum --- mod/forum/externallib.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/mod/forum/externallib.php b/mod/forum/externallib.php index 6f2823a346f..19fb3093e24 100644 --- a/mod/forum/externallib.php +++ b/mod/forum/externallib.php @@ -848,6 +848,8 @@ class mod_forum_external extends external_api { $context = context_module::instance($cm->id); self::validate_context($context); + require_capability('mod/forum:viewdiscussion', $context, null, true, 'noviewdiscussionspermission', 'forum'); + // Call the forum/lib API. forum_view($forum, $course, $cm, $context); @@ -912,6 +914,8 @@ class mod_forum_external extends external_api { $modcontext = context_module::instance($cm->id); self::validate_context($modcontext); + require_capability('mod/forum:viewdiscussion', $modcontext, null, true, 'noviewdiscussionspermission', 'forum'); + // Call the forum/lib API. forum_discussion_view($modcontext, $forum, $discussion);