mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-21 16:32:18 +02:00
Code Issues Projects Releases Wiki Activity

MDL-57001 roles: Do access check for switchroles

Browse Source 
Put it in the API so it can't be skipped.
This commit is contained in:
Damyon Wiese 2016-11-24 15:01:55 +08:00
parent 7dba450fd4
commit 2fedc0da7c
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
lib/accesslib.php
View File

@ -3169,6 +3169,11 @@ function get_assignable_roles(context $context, $rolenamedisplay = ROLENAME_ALIA
function get_switchable_roles(context $context) {
global $USER, $DB;
// You can't switch roles without this capability.
if (!has_capability('moodle/role:switchroles', $context)) {
return [];
}
$params = array();
$extrajoins = '';
$extrawhere = '';