added group access checks in grade edit form

2007-08-07 21:26:59 +00:00
parent 0a788db702
commit dc3ca94c92
1 changed files with 16 additions and 0 deletions
@@ -49,6 +49,22 @@ if (!$grade_item = grade_item::fetch(array('id'=>$itemid, 'courseid'=>$courseid)
    error('Can not find grade_item');
 }

+// now verify grading user has access to all groups or is member of the same group when separate groups used in course
+if (groupmode($COURSE) == SEPARATEGROUPS and !has_capability('moodle/site:accessallgroups', $context)) {
+    if ($groups = user_group($COURSE->id, $userid)) {
+        $ok = false;
+        foreach ($groups as $group) {
+            if (groups_is_member($group->id, $USER->id)) {
+                $ok = true;
+            }
+        }
+        if (!$ok) {
+            error('Can not grade this user');
+        }
+    } else {
+        error('Can not grade this user');
+    }
+}

 $mform = new edit_grade_form(null, array('grade_item'=>$grade_item, 'gpr'=>$gpr));