From b4eeee49cd931a6297687d80e4e53fdd5dcbb93e Mon Sep 17 00:00:00 2001
From: Damyon Wiese <damyon@moodle.com>
Date: Wed, 13 Mar 2013 11:13:42 +0800
Subject: [PATCH] MDL-38443 Assignment: Missing permissions check on
 downloadall submissions

---
 mod/assign/locallib.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/mod/assign/locallib.php b/mod/assign/locallib.php
index 0a5d8c4017a..e97c2e57290 100644
--- a/mod/assign/locallib.php
+++ b/mod/assign/locallib.php
@@ -1565,6 +1565,8 @@ class assign {
         // more efficient to load this here
         require_once($CFG->libdir.'/filelib.php');
 
+        require_capability('mod/assign:grade', $this->context);
+
         // load all submissions
         $submissions = $this->get_all_submissions('','');