MDL-17965: Prevent forum move to forum you can't start discussions in

diff --git a/mod/forum/discuss.php b/mod/forum/discuss.php
index 46ef0ec7f6abd62e6ec9fe776e517655f80dc2af..0c5bb0f583d22d9bee1af5126bf8a3a5c8e3a1db 100644 (file)
--- a/mod/forum/discuss.php
+++ b/mod/forum/discuss.php
@@ -70,6 +70,9 @@
             print_error('cannotmovenotvisible', 'forum', $return);
         }
 
+        require_capability('mod/forum:startdiscussion',
+            get_context_instance(CONTEXT_MODULE,$cmto->id));
+
         if (!forum_move_attachments($discussion, $forum->id, $forumto->id)) {
             notify("Errors occurred while moving attachment directories - check your file permissions");
         }
@@ -191,7 +194,8 @@
             $section = -1;
             $forummenu = array();
             foreach ($modinfo->instances['forum'] as $forumcm) {
-                if (!$forumcm->uservisible) {
+                if (!$forumcm->uservisible || !has_capability('mod/forum:startdiscussion',
+                    get_context_instance(CONTEXT_MODULE,$forumcm->id))) {
                     continue;
                 }