From 7ace11d39601b4197a5b94780fb6a316bac72c7c Mon Sep 17 00:00:00 2001 From: Paul Holden Date: Mon, 27 Nov 2023 20:35:33 +0000 Subject: [PATCH] MDL-80268 badges: require capability to view awarded badges. --- badges/recipients.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/badges/recipients.php b/badges/recipients.php index 8a29747e673..7dea7f2ae02 100644 --- a/badges/recipients.php +++ b/badges/recipients.php @@ -54,6 +54,8 @@ $badge = new badge($badgeid); $context = $badge->get_context(); $navurl = new moodle_url('/badges/index.php', array('type' => $badge->type)); +require_capability('moodle/badges:viewawarded', $context); + if ($badge->type == BADGE_TYPE_COURSE) { if (empty($CFG->badges_allowcoursebadges)) { throw new \moodle_exception('coursebadgesdisabled', 'badges');