diff --git a/calendar/lib.php b/calendar/lib.php index 7377d4481de..8810d7e1ff3 100644 --- a/calendar/lib.php +++ b/calendar/lib.php @@ -3205,6 +3205,7 @@ function calendar_update_subscription($subscription) { * @return bool true if current user can edit the subscription else false */ function calendar_can_edit_subscription($subscriptionorid) { + global $USER; if (is_array($subscriptionorid)) { $subscription = (object)$subscriptionorid; } else if (is_object($subscriptionorid)) { @@ -3225,7 +3226,7 @@ function calendar_can_edit_subscription($subscriptionorid) { calendar_get_allowed_types($allowed, $courseid, null, $category); switch ($subscription->eventtype) { case 'user': - return $allowed->user; + return ($USER->id == $subscription->userid && $allowed->user); case 'course': if (isset($allowed->courses[$courseid])) { return $allowed->courses[$courseid];