From e235c97f099210b5d9032b1f5343adf8d199d404 Mon Sep 17 00:00:00 2001 From: Andreas Grabs Date: Tue, 2 Jul 2013 13:30:47 +0800 Subject: [PATCH] MDL-39570 mod_feedback - Missing privilege check --- mod/feedback/lib.php | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/mod/feedback/lib.php b/mod/feedback/lib.php index 9f0b2684ba8..2490c3d4116 100644 --- a/mod/feedback/lib.php +++ b/mod/feedback/lib.php @@ -402,7 +402,12 @@ function feedback_get_recent_mod_activity(&$activities, &$index, return; } - $cm_context = context_module::instance($cm->id); + $cm_context = context_module::instance($cm->id); + + if (!has_capability('mod/feedback:view', $cm_context)) { + return; + } + $accessallgroups = has_capability('moodle/site:accessallgroups', $cm_context); $viewfullnames = has_capability('moodle/site:viewfullnames', $cm_context); $groupmode = groups_get_activity_groupmode($cm, $course);