MDL-11759 missing RISK_XSS in manage groups capability; merged from MOODLE_18_STABLE

diff --git a/lib/db/access.php b/lib/db/access.php
index df7ec364c1b3ae269c9579b5f23ef85c548a76ca..66ab79b5361f18ba47e5727123cce02f1e633ac1 100644 (file)
--- a/lib/db/access.php
+++ b/lib/db/access.php
@@ -631,6 +631,8 @@ $moodle_capabilities = array(
 
     'moodle/course:managegroups' => array(
 
+        'riskbitmask' => RISK_XSS,
+
         'captype' => 'write',
         'contextlevel' => CONTEXT_COURSE,
         'legacy' => array(