MDL-12911 fixed permission checks; merged from MOODLE_18_STABLE

diff --git a/course/loginas.php b/course/loginas.php
index 5cd9e36273ded94a13ebfe891028f3f38398daea..3bddfe5aaf6c9fa8e120d8acc613f474956f1750 100644 (file)
--- a/course/loginas.php
+++ b/course/loginas.php
@@ -61,8 +61,9 @@
             print_error('nologinas');
         }
         $context = $systemcontext;
-    } else if (has_capability('moodle/user:loginas', $coursecontext)) {
+    } else {
         require_login($course);
+        require_capability('moodle/user:loginas', $coursecontext);
         if (!has_capability('moodle/course:view', $coursecontext, $userid, false)) {
             error('This user is not in this course!');
         }