Only editing teachers are allowed to unenrol students

diff --git a/course/unenrol.php b/course/unenrol.php
index 21d08bec2be24fd5a8a0ac7b23f007928dd0c21b..d3927dcb8efa419b8f40ac371f15ca778b695290 100644 (file)
--- a/course/unenrol.php
+++ b/course/unenrol.php
@@ -20,8 +20,8 @@
 
     require_login($course->id);
 
-    if ($user->id != $USER->id and !isteacher($course->id)) {
-        error("You must be a teacher to do this");
+    if ($user->id != $USER->id and !isteacheredit($course->id)) {
+        error("You must be a teacher with editing rights to do this");
     }
 
     if ($user->id == $USER->id and !$CFG->allowunenroll) {

diff --git a/lib/weblib.php b/lib/weblib.php
index c3bcb528c58c06b2c76c07e986faee3375b1857b..9ba848eb77a92c5e37a13aeebc693e53f75f6c45 100644 (file)
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -1305,7 +1305,7 @@ function print_user($user, $course) {
         $timemidnight = usergetmidnight(time());
         echo "<a href=\"$CFG->wwwroot/course/user.php?id=$course->id&user=$user->id\">$string->activity</a><br>";
         if (!iscreator($user->id)) {  // Includes admins
-            if (isstudent($course->id, $user->id)) {  // Includes admins
+            if (isteacheredit($course->id) and isstudent($course->id, $user->id)) {  // Includes admins
                 echo "<a href=\"$CFG->wwwroot/course/unenrol.php?id=$course->id&user=$user->id\">$string->unenrol</a><br />";
             }
             if ($USER->id != $user->id) {

diff --git a/user/view.php b/user/view.php
index c2a6c015fef967fdf1ed278e26109773148ed44d..1955bfc1a3cc006f5bf04298002fa88df1e11cad 100644 (file)
--- a/user/view.php
+++ b/user/view.php
@@ -213,7 +213,7 @@
     }
     if ($course->category and 
         ((isstudent($course->id) and ($user->id == $USER->id) and !isguest() and $CFG->allowunenroll) or 
-        (isteacher($course->id) and isstudent($course->id, $user->id))) ) {
+        (isteacheredit($course->id) and isstudent($course->id, $user->id))) ) {
         echo "<td nowrap><p><form action=\"../course/unenrol.php\" method=get>";
         echo "<input type=hidden name=id value=\"$course->id\">";
         echo "<input type=hidden name=user value=\"$user->id\">";