MDL-64528 core_completion: prevent toggling completion in frozen context

2019-01-30 21:25:09 +01:00
parent a7e2a7fecf
commit f7afadd846
5 changed files with 13 additions and 1 deletions
@@ -75,6 +75,7 @@ class core_completion_external extends external_api {

        $context = context_module::instance($cmid);
        self::validate_context($context);
+        require_capability('moodle/course:togglecompletion', $context);

        list($course, $cm) = get_course_and_cm_from_cmid($cmid);