mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-04-07 09:23:31 +02:00
Code Issues Projects Releases Wiki Activity

MDL-47802 mod_forum: Check for required subscription capabilities

Browse Source 
Users must be able to both view, and manage their subscription in order to
subscribe or be subscribed to a discussion.
This commit is contained in:
Andrew Nicols 2014-10-24 08:08:56 +08:00 committed by Dan Poltawski
parent 0603df04da
commit 71bc139d63
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
mod/forum/discuss.php
View File

@ -137,7 +137,10 @@
$newdiscussion->forum = $forumto->id;
foreach ($subscriptionchanges as $userid => $preference) {
if ($preference === \mod_forum\subscriptions::FORUM_DISCUSSION_SUBSCRIBED) {
\mod_forum\subscriptions::subscribe_user_to_discussion($userid, $newdiscussion, $destinationctx);
// Users must have viewdiscussion to a discussion.
if (has_capability('mod/forum:viewdiscussion', $destinationctx, $userid)) {
\mod_forum\subscriptions::subscribe_user_to_discussion($userid, $newdiscussion, $destinationctx);
}
} else {
\mod_forum\subscriptions::unsubscribe_user_from_discussion($userid, $newdiscussion, $destinationctx);
}

1
mod/forum/subscribe_ajax.php
View File

@ -37,6 +37,7 @@ $cm = get_coursemodule_from_instance('forum', $forum->id, $course->i
$context = context_module::instance($cm->id);
require_login($course, false, $cm);
require_capability('mod/forum:viewdiscussion', $context);
$return = new stdClass();