Merged fix from MDL-7239

diff --git a/blocks/admin/block_admin.php b/blocks/admin/block_admin.php
index 8df96db5d2a00404f1b632f24cb3ac894561d170..9a8031a48688e6c10d226c312dbb5f52c14a939f 100644 (file)
--- a/blocks/admin/block_admin.php
+++ b/blocks/admin/block_admin.php
@@ -146,8 +146,10 @@ class block_admin extends block_list {
         if ($course->enrol == 'authorize' || (empty($course->enrol) && $CFG->enrol == 'authorize')) {
             require_once($CFG->dirroot.'/enrol/authorize/const.php');
             $paymenturl = '<a href="'.$CFG->wwwroot.'/enrol/authorize/index.php?course='.$course->id.'">'.get_string('payments').'</a> ';
-            if ($cnt = count_records('enrol_authorize', 'status', AN_STATUS_AUTH, 'courseid', $course->id)) {
-                $paymenturl .= '<a href="'.$CFG->wwwroot.'/enrol/authorize/index.php?status='.AN_STATUS_AUTH.'&amp;course='.$course->id.'">'.get_string('paymentpending', 'moodle', $cnt).'</a>';
+            if (has_capability('enrol/authorize:managepayments', $context)) {
+                if ($cnt = count_records('enrol_authorize', 'status', AN_STATUS_AUTH, 'courseid', $course->id)) {
+                    $paymenturl .= '<a href="'.$CFG->wwwroot.'/enrol/authorize/index.php?status='.AN_STATUS_AUTH.'&amp;course='.$course->id.'">'.get_string('paymentpending', 'moodle', $cnt).'</a>';
+                }
             }
             $this->content->items[] = $paymenturl;
             $this->content->icons[] = '<img src="'.$CFG->pixpath.'/i/payment.gif" alt="" />';