MDL-64528 core_completion: prevent toggling completion in frozen context

2019-01-30 21:25:09 +01:00
parent a7e2a7fecf
commit f7afadd846
5 changed files with 13 additions and 1 deletions
@@ -139,6 +139,7 @@ $course = $DB->get_record('course', array('id'=>$cm->course), '*', MUST_EXIST);

 // Check user is logged in
 require_login($course, false, $cm);
+require_capability('moodle/course:togglecompletion', context_module::instance($cmid));

 if (isguestuser() or !confirm_sesskey()) {
    print_error('error');