MDL-39570 mod_feedback - Missing privilege check

2013-07-02 13:36:51 +08:00
parent d7e626156e
commit e235c97f09
1 changed files with 6 additions and 1 deletions
@@ -402,7 +402,12 @@ function feedback_get_recent_mod_activity(&$activities, &$index,
        return;
    }

-    $cm_context      = context_module::instance($cm->id);
+    $cm_context = context_module::instance($cm->id);
+
+    if (!has_capability('mod/feedback:view', $cm_context)) {
+        return;
+    }
+
    $accessallgroups = has_capability('moodle/site:accessallgroups', $cm_context);
    $viewfullnames   = has_capability('moodle/site:viewfullnames', $cm_context);
    $groupmode       = groups_get_activity_groupmode($cm, $course);