mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-21 00:12:56 +02:00
Code Issues Projects Releases Wiki Activity

MDL-73684 core_user: check edit capability only when user exists

Browse Source
This commit is contained in:
Marina Glancy 2022-01-25 16:00:10 +01:00
parent e63604fb6d
commit 3cc217193a
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
user/profile/lib.php
View File

@ -506,9 +506,11 @@ class profile_field_base {
}
// Checking for mentors have capability to edit user's profile.
$usercontext = context_user::instance($this->userid);
if ($this->userid != $USER->id && has_capability('moodle/user:editprofile', $usercontext, $USER->id)) {
return true;
if ($this->userid > 0) {
$usercontext = context_user::instance($this->userid);
if ($this->userid != $USER->id && has_capability('moodle/user:editprofile', $usercontext, $USER->id)) {
return true;
}
}
return false;