webservice MDL-20805 no admin should create web service token for themself

diff --git a/lib/navigationlib.php b/lib/navigationlib.php
index 106fa0c0f46aa582af5f88e433c39a8a4e4f93e9..0d75c05a2add858c9ca3ea367b4f714ed21244b3 100644 (file)
--- a/lib/navigationlib.php
+++ b/lib/navigationlib.php
@@ -3355,7 +3355,7 @@ class settings_navigation extends navigation_node {
         }
 
         // Webservice
-        if ($currentuser && !empty($CFG->enablewebservices) && has_capability('moodle/webservice:createtoken', $systemcontext)) {
+        if ($currentuser && !is_siteadmin($USER->id) && !empty($CFG->enablewebservices) && has_capability('moodle/webservice:createtoken', $systemcontext)) {
             $url = new moodle_url($CFG->wwwroot .'/user/managetoken.php', array('sesskey'=>sesskey()));
             $usersetting->add(get_string('webservices', 'webservice'), $url, self::TYPE_SETTING);
         }