Guests can NEVER manage payments. CAP_PREVENT to CAP_PROHIBIT.

diff --git a/enrol/authorize/db/access.php b/enrol/authorize/db/access.php
index b2e051f73430aeb73bf0a9f2287cf66c10afbba5..98eeaa8f2c7954a7bf5a362eeac1cf3f845c99cc 100644 (file)
--- a/enrol/authorize/db/access.php
+++ b/enrol/authorize/db/access.php
@@ -6,7 +6,7 @@ $enrol_authorize_capabilities = array(
         'captype' => 'write',
         'contextlevel' => CONTEXT_SYSTEM,
         'legacy' => array(
-            'guest' => CAP_PREVENT,
+            'guest' => CAP_PROHIBIT,
             'student' => CAP_PREVENT,
             'teacher' => CAP_PREVENT,
             'editingteacher' => CAP_PREVENT,