MDL-14045

Now respects mod/assignment:view

diff --git a/mod/assignment/type/online/all.php b/mod/assignment/type/online/all.php
index 50dacce7c5a94af87c9db8da990c7d8deaa39885..5394de8428ae3f72a110e13ee509f009ca2da079 100644 (file)
--- a/mod/assignment/type/online/all.php
+++ b/mod/assignment/type/online/all.php
@@ -24,6 +24,10 @@
 
     require_course_login($course);
 
+    // check for view capability at course level
+    $context = get_context_instance(CONTEXT_COURSE,$course->id);
+    require_capability('mod/assignment:view',$context);
+
     // various strings
     $str = new stdClass; 
     $str->assignments = get_string("modulenameplural", "assignment");
@@ -69,6 +73,12 @@
             continue;
         } 
 
+        // check we are allowed to view this
+        $context = get_context_instance(CONTEXT_MODULE, $assignment->coursemodule);
+        if (!has_capability('mod/assignment:view',$context)) {
+            continue;
+        }
+
         // create instance of assignment class to get 
         // submitted assignments
         $onlineinstance = new assignment_online( $assignment->coursemodule );