mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-03-14 04:30:15 +01:00
Code Issues Projects Releases Wiki Activity

MDL-49902 forum: Add missing capability check in mod_forum_view_forum

Browse Source
This commit is contained in:
Juan Leyva 2015-04-16 21:31:22 +02:00
parent b6a76cd7cd
commit ea2fa324d7
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
mod/forum/externallib.php
View File

@ -848,6 +848,8 @@ class mod_forum_external extends external_api {
$context = context_module::instance($cm->id);
self::validate_context($context);
require_capability('mod/forum:viewdiscussion', $context, null, true, 'noviewdiscussionspermission', 'forum');
// Call the forum/lib API.
forum_view($forum, $course, $cm, $context);
@ -912,6 +914,8 @@ class mod_forum_external extends external_api {
$modcontext = context_module::instance($cm->id);
self::validate_context($modcontext);
require_capability('mod/forum:viewdiscussion', $modcontext, null, true, 'noviewdiscussionspermission', 'forum');
// Call the forum/lib API.
forum_discussion_view($modcontext, $forum, $discussion);