From 61d04bcc46b9baaaf754dff14b13b73ea0ce1d35 Mon Sep 17 00:00:00 2001
From: tjhunt <tjhunt>
Date: Fri, 12 Sep 2008 05:18:27 +0000
Subject: [PATCH] MDL-15632 Wrong permission in the admin tree defininition
 mean that people with moodle/role:manage could not define role, and people
 with moodle/role:assign could not assign system roles.

---
 admin/settings/users.php | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/admin/settings/users.php b/admin/settings/users.php
index c15caf6f0b..2ac82ab6d2 100644
--- a/admin/settings/users.php
+++ b/admin/settings/users.php
@@ -6,7 +6,9 @@ if ($hassiteconfig
  or has_capability('moodle/site:uploadusers', $systemcontext)
  or has_capability('moodle/user:create', $systemcontext)
  or has_capability('moodle/user:update', $systemcontext)
- or has_capability('moodle/user:delete', $systemcontext)) { // speedup for non-admins, add all caps used on this page
+ or has_capability('moodle/user:delete', $systemcontext)
+ or has_capability('moodle/role:manage', $systemcontext)
+ or has_capability('moodle/role:assign', $systemcontext)) { // speedup for non-admins, add all caps used on this page
 
 
     $ADMIN->add('users', new admin_category('authsettings', get_string('authentication','admin')));
@@ -78,8 +80,8 @@ if ($hassiteconfig
 
     // stuff under the "roles" subcategory
     $ADMIN->add('users', new admin_category('roles', get_string('permissions', 'role')));
-    $ADMIN->add('roles', new admin_externalpage('defineroles', get_string('defineroles', 'role'), "$CFG->wwwroot/$CFG->admin/roles/manage.php"));
-    $ADMIN->add('roles', new admin_externalpage('assignroles', get_string('assignglobalroles', 'role'), "$CFG->wwwroot/$CFG->admin/roles/assign.php?contextid=".$systemcontext->id));
+    $ADMIN->add('roles', new admin_externalpage('defineroles', get_string('defineroles', 'role'), "$CFG->wwwroot/$CFG->admin/roles/manage.php", 'moodle/role:manage'));
+    $ADMIN->add('roles', new admin_externalpage('assignroles', get_string('assignglobalroles', 'role'), "$CFG->wwwroot/$CFG->admin/roles/assign.php?contextid=".$systemcontext->id, 'moodle/role:assign'));
 
 
     // "userpolicies" settingpage
-- 
2.39.5