mirror of
https://github.com/moodle/moodle.git
synced 2025-04-21 16:32:18 +02:00
MDL-15768 - further capability check in mod/data portfolio export
This commit is contained in:
parent
07028cd91f
commit
adbf3cd005
@ -49,7 +49,7 @@ foreach ($fieldrecords as $fieldrecord) {
|
||||
$fields[]= data_get_field($fieldrecord, $data);
|
||||
}
|
||||
|
||||
$mform = new mod_data_export_form('export.php?d='.$data->id, $fields);
|
||||
$mform = new mod_data_export_form('export.php?d='.$data->id, $fields, $cm);
|
||||
|
||||
if($mform->is_cancelled()) {
|
||||
redirect('view.php?d='.$data->id);
|
||||
|
@ -8,10 +8,13 @@ require_once($CFG->libdir . '/csvlib.class.php');
|
||||
|
||||
class mod_data_export_form extends moodleform {
|
||||
var $_datafields = array();
|
||||
var $_cm;
|
||||
|
||||
// @param string $url: the url to post to
|
||||
// @param array $datafields: objects in this database
|
||||
function mod_data_export_form($url, $datafields) {
|
||||
function mod_data_export_form($url, $datafields, $cm) {
|
||||
$this->_datafields = $datafields;
|
||||
$this->_cm = $cm;
|
||||
parent::moodleform($url);
|
||||
}
|
||||
|
||||
@ -53,7 +56,7 @@ class mod_data_export_form extends moodleform {
|
||||
}
|
||||
$this->add_checkbox_controller(1, null, null, 1);
|
||||
require_once($CFG->libdir . '/portfoliolib.php');
|
||||
if (true) { // @todo penny replace with permissions check
|
||||
if (has_capability('mod/data:exportallentries', get_context_instance(CONTEXT_MODULE, $this->_cm->id))) {
|
||||
if ($portfoliooptions = portfolio_instance_select(
|
||||
portfolio_instances(),
|
||||
call_user_func(array('data_portfolio_caller', 'supported_formats')),
|
||||
|
Loading…
x
Reference in New Issue
Block a user