From d42189d71a0c8b0042f8c24f586f6c537d202f8f Mon Sep 17 00:00:00 2001
From: Stefan Hanauska <stefan.hanauska@csg-in.de>
Date: Wed, 16 Nov 2022 13:41:53 +0100
Subject: [PATCH] MDL-76330 enrol: Check permission to show edit icon

---
 lib/enrollib.php | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/lib/enrollib.php b/lib/enrollib.php
index caef6930967..8f1cb302cac 100644
--- a/lib/enrollib.php
+++ b/lib/enrollib.php
@@ -2725,10 +2725,14 @@ abstract class enrol_plugin {
 
         $icons = array();
         if ($this->use_standard_editing_ui()) {
-            $linkparams = array('courseid' => $instance->courseid, 'id' => $instance->id, 'type' => $instance->enrol);
-            $editlink = new moodle_url("/enrol/editinstance.php", $linkparams);
-            $icons[] = $OUTPUT->action_icon($editlink, new pix_icon('t/edit', get_string('edit'), 'core',
-                array('class' => 'iconsmall')));
+            $context = context_course::instance($instance->courseid);
+            $cap = 'enrol/' . $instance->enrol . ':config';
+            if (has_capability($cap, $context)) {
+                $linkparams = array('courseid' => $instance->courseid, 'id' => $instance->id, 'type' => $instance->enrol);
+                $editlink = new moodle_url("/enrol/editinstance.php", $linkparams);
+                $icons[] = $OUTPUT->action_icon($editlink, new pix_icon('t/edit', get_string('edit'), 'core',
+                    array('class' => 'iconsmall')));
+            }
         }
         return $icons;
     }