Merged MDL-13568 Only show full profiles if capability allows it (FERPA)

diff --git a/user/tabs.php b/user/tabs.php
index 7aad08a1624382a2ff6e1ab1f1330f02127214c1..82f9263793bf12f098ac4465230087a1209090fc 100644 (file)
--- a/user/tabs.php
+++ b/user/tabs.php
@@ -89,12 +89,14 @@
         }
         print_heading(fullname($user, has_capability('moodle/site:viewfullnames', get_context_instance(CONTEXT_COURSE, $course->id))));
 
-        $toprow[] = new tabobject('profile', $CFG->wwwroot.'/user/view.php?id='.$user->id.'&course='.$course->id, get_string('profile'));
-
         $systemcontext   = get_context_instance(CONTEXT_SYSTEM);
         $coursecontext   = get_context_instance(CONTEXT_COURSE, $course->id);
         $personalcontext = get_context_instance(CONTEXT_USER, $user->id);
 
+        if ($user->id == $USER->id || has_capability('moodle/user:viewdetails', $coursecontext) || has_capability('moodle/user:viewdetails', $personalcontext) ) { 
+            $toprow[] = new tabobject('profile', $CFG->wwwroot.'/user/view.php?id='.$user->id.'&course='.$course->id, get_string('profile'));
+        }
+
 
     /// Can only edit profile if it belongs to user or current user is admin and not editing primary admin