From 98335b2da843fa4aa9c2ae7fe79590a9314d8524 Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Sat, 28 Mar 2009 22:02:00 +0000
Subject: [PATCH] MDL-14591 adding standard access control

---
 portfolio/add.php     | 2 ++
 portfolio/already.php | 3 +++
 portfolio/file.php    | 7 +++++++
 3 files changed, 12 insertions(+)

diff --git a/portfolio/add.php b/portfolio/add.php
index 65769de693..3e48979236 100644
--- a/portfolio/add.php
+++ b/portfolio/add.php
@@ -10,6 +10,8 @@ require_once($CFG->libdir . '/formslib.php');
 
 $cancel = optional_param('cancel', 0, PARAM_RAW);
 
+require_login();
+
 $exporter = null;
 $dataid = 0;
 
diff --git a/portfolio/already.php b/portfolio/already.php
index 05fc4da43f..c0ce4828dc 100644
--- a/portfolio/already.php
+++ b/portfolio/already.php
@@ -4,8 +4,11 @@ require_once(dirname(dirname(__FILE__)) . '/config.php');
 if (empty($CFG->enableportfolios)) {
     print_error('disabled', 'portfolio');
 }
+
 require_once($CFG->libdir . '/portfoliolib.php');
 
+require_login();
+
 $dataid = 0;
 $currentinfo = null;
 if (!$dataid = optional_param('id', '', PARAM_INT) ) {
diff --git a/portfolio/file.php b/portfolio/file.php
index 4dce6e4f57..e56cceb564 100644
--- a/portfolio/file.php
+++ b/portfolio/file.php
@@ -1,11 +1,18 @@
 <?php
 require_once(dirname(dirname(__FILE__)) . '/config.php');
+
+if (empty($CFG->enableportfolios)) {
+    print_error('disabled', 'portfolio');
+}
+
 require_once($CFG->libdir . '/portfoliolib.php');
 require_once($CFG->libdir . '/file/stored_file.php');
 require_once($CFG->libdir . '/filelib.php');
 
 $id = required_param('id', PARAM_INT);
 
+require_login();
+
 $exporter = portfolio_exporter::rewaken_object($id);
 $exporter->verify_rewaken();
 
-- 
2.39.5