diff --git a/mod/forum/externallib.php b/mod/forum/externallib.php index 6f2823a346f..19fb3093e24 100644 --- a/mod/forum/externallib.php +++ b/mod/forum/externallib.php @@ -848,6 +848,8 @@ class mod_forum_external extends external_api { $context = context_module::instance($cm->id); self::validate_context($context); + require_capability('mod/forum:viewdiscussion', $context, null, true, 'noviewdiscussionspermission', 'forum'); + // Call the forum/lib API. forum_view($forum, $course, $cm, $context); @@ -912,6 +914,8 @@ class mod_forum_external extends external_api { $modcontext = context_module::instance($cm->id); self::validate_context($modcontext); + require_capability('mod/forum:viewdiscussion', $modcontext, null, true, 'noviewdiscussionspermission', 'forum'); + // Call the forum/lib API. forum_discussion_view($modcontext, $forum, $discussion);