webservice MDL-20805 no admin should create web service token for themself

This commit is contained in:
jerome mouneyrac
2010-01-13 02:01:56 +00:00
parent d5ce5c22e8
commit de7a00a400
+1 -1
View File
@@ -3355,7 +3355,7 @@ class settings_navigation extends navigation_node {
}
// Webservice
if ($currentuser && !empty($CFG->enablewebservices) && has_capability('moodle/webservice:createtoken', $systemcontext)) {
if ($currentuser && !is_siteadmin($USER->id) && !empty($CFG->enablewebservices) && has_capability('moodle/webservice:createtoken', $systemcontext)) {
$url = new moodle_url($CFG->wwwroot .'/user/managetoken.php', array('sesskey'=>sesskey()));
$usersetting->add(get_string('webservices', 'webservice'), $url, self::TYPE_SETTING);
}