From f23877abfbd019eee98f23e3fe9eebc246eed26b Mon Sep 17 00:00:00 2001
From: Damyon Wiese <damyon@moodle.com>
Date: Wed, 13 Mar 2013 11:07:12 +0800
Subject: [PATCH] MDL-38443 Assignment: Missing permissions check on
 downloadall submissions

---
 mod/assign/locallib.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/mod/assign/locallib.php b/mod/assign/locallib.php
index f98e598658f..9ad8df3a806 100644
--- a/mod/assign/locallib.php
+++ b/mod/assign/locallib.php
@@ -2026,6 +2026,8 @@ class assign {
         // More efficient to load this here.
         require_once($CFG->libdir.'/filelib.php');
 
+        require_capability('mod/assign:grade', $this->context);
+
         // Load all users with submit.
         $students = get_enrolled_users($this->context, "mod/assign:submit");