MDL-69093 enrol_manual: added check for allowed roles a user can assign

2020-07-07 08:32:39 +02:00
parent 877a3f70d0
commit d07fb8b9e8
1 changed files with 7 additions and 0 deletions
@@ -100,6 +100,13 @@ switch ($action) {

        if (empty($roleid)) {
            $roleid = null;
+        } else {
+            if (!has_capability('moodle/role:assign', $context)) {
+                throw new enrol_ajax_exception('assignnotpermitted');
+            }
+            if (!array_key_exists($roleid, get_assignable_roles($context, ROLENAME_ALIAS, false))) {
+                throw new enrol_ajax_exception('invalidrole');
+            }
        }

        if (empty($startdate)) {