MDL-50220 mod_forum: added missing capability check

2015-06-29 18:49:21 +02:00
parent 5656fdb9c9
commit adb234e19d
1 changed files with 1 additions and 0 deletions
@@ -874,6 +874,7 @@ if ($mform_post->is_cancelled()) {

        // If we are posting a copy to all groups the user has access to.
        if (isset($fromform->posttomygroups)) {
+            require_capability('mod/forum:canposttomygroups', $modcontext);
            $allowedgroups = groups_get_activity_allowed_groups($cm);
            $groupstopostto = array_keys($allowedgroups);
        } else {