MDL-11004 missing capability check in main manu block on the frontpage

diff --git a/blocks/site_main_menu/block_site_main_menu.php b/blocks/site_main_menu/block_site_main_menu.php
index 061ad97e1fe41be7146362100dadf54c8e857467..9e8b66d382d65eedba35ca76797bb04026fbe8d4 100644 (file)
--- a/blocks/site_main_menu/block_site_main_menu.php
+++ b/blocks/site_main_menu/block_site_main_menu.php
@@ -29,7 +29,7 @@ class block_site_main_menu extends block_list {
         $course = get_record('course', 'id', $this->instance->pageid);
         $context = get_context_instance(CONTEXT_COURSE, $course->id);
 
-        $isediting = isediting($this->instance->pageid);
+        $isediting = isediting($this->instance->pageid) && has_capability('moodle/course:manageactivities', $context);
         $ismoving  = ismoving($this->instance->pageid);
 
         $sections = get_all_sections($this->instance->pageid);