MDL-34519 - Course reset not protected by proper capability
This commit is contained in:
+1
-1
@@ -39,7 +39,7 @@ if (!$course = $DB->get_record('course', array('id'=>$id))) {
|
||||
$PAGE->set_url('/course/reset.php', array('id'=>$id));
|
||||
|
||||
require_login($course);
|
||||
require_capability('moodle/course:update', get_context_instance(CONTEXT_COURSE, $course->id));
|
||||
require_capability('moodle/course:reset', get_context_instance(CONTEXT_COURSE, $course->id));
|
||||
|
||||
$strreset = get_string('reset');
|
||||
$strresetcourse = get_string('resetcourse');
|
||||
|
||||
Reference in New Issue
Block a user