mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-13 12:32:08 +02:00
Code Issues Projects Releases Wiki Activity

MDL-78792 message: access checks in processor fragment callback.

Browse Source
This commit is contained in:
Paul Holden 2023-07-21 17:06:34 +01:00 committed by Huong Nguyen
parent 058b830b07
commit 092273751b
No known key found for this signature in database
GPG Key ID: 40D88AB693A3E72A
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
message/lib.php
View File

@ -696,6 +696,10 @@ function message_output_fragment_processor_settings($args = []) {
$userid = $args['userid'];
$user = core_user::get_user($userid, '*', MUST_EXIST);
if (!core_message_can_edit_message_profile($user)) {
throw new moodle_exception('Cannot edit message profile');
}
$processor = get_message_processor($type);
$providers = message_get_providers_for_user($userid);
$processorwrapper = new stdClass();