Fixed some bung security logic

2006-03-25 16:19:06 +00:00
parent 2740351ee9
commit dbcf5bdcbf
1 changed files with 3 additions and 3 deletions
@@ -68,9 +68,9 @@
        error (get_string('noaccess','data'));
    }

-    if ($rid){    //editting a record, do you have access to edit this?
-        if (!isteacher($course->id) or !data_isowner($rid) or !confirm_sesskey()){
-            error (get_string('noaccess','data'));
+    if ($rid) {    // So do you have access?
+        if (!(isteacher($course->id) or data_isowner($rid)) or !confirm_sesskey() ) {
+            error(get_string('noaccess','data'));
        }
    }