L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-49902 forum: Add missing capability check in mod_forum_view_forum

Browse Source
This commit is contained in:
Juan Leyva
2015-04-16 22:07:11 +02:00
parent b6a76cd7cd
commit ea2fa324d7
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mod/forum/externallib.php
+4
View File
@@ -848,6 +848,8 @@ class mod_forum_external extends external_api {
$context = context_module::instance($cm->id);
self::validate_context($context);
require_capability('mod/forum:viewdiscussion', $context, null, true, 'noviewdiscussionspermission', 'forum');
// Call the forum/lib API.
forum_view($forum, $course, $cm, $context);
@@ -912,6 +914,8 @@ class mod_forum_external extends external_api {
$modcontext = context_module::instance($cm->id);
self::validate_context($modcontext);
require_capability('mod/forum:viewdiscussion', $modcontext, null, true, 'noviewdiscussionspermission', 'forum');
// Call the forum/lib API.
forum_discussion_view($modcontext, $forum, $discussion);