From add560f3009ab1c1d4b89a3e7e9acc7e9a741d43 Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Sat, 28 Mar 2009 22:15:12 +0000
Subject: [PATCH] MDL-14591 adding standard access control

---
 portfolio/type/download/file.php    | 7 +++++++
 portfolio/type/mahara/preconfig.php | 7 +++++++
 2 files changed, 14 insertions(+)

diff --git a/portfolio/type/download/file.php b/portfolio/type/download/file.php
index 3dc7eb4365..abb7f2ab30 100644
--- a/portfolio/type/download/file.php
+++ b/portfolio/type/download/file.php
@@ -1,10 +1,17 @@
 <?php
 
 require_once(dirname(dirname(dirname(dirname(__FILE__)))) . '/config.php');
+
+if (empty($CFG->enableportfolios)) {
+    print_error('disabled', 'portfolio');
+}
+
 require_once($CFG->libdir.'/portfoliolib.php');
 require_js(array('yui_yahoo', 'yui_dom'));
 $id = required_param('id', PARAM_INT);
 
+require_login();
+
 $exporter = portfolio_exporter::rewaken_object($id);
 $exporter->verify_rewaken();
 
diff --git a/portfolio/type/mahara/preconfig.php b/portfolio/type/mahara/preconfig.php
index 0f1d38d95b..8784fc8208 100644
--- a/portfolio/type/mahara/preconfig.php
+++ b/portfolio/type/mahara/preconfig.php
@@ -1,8 +1,15 @@
 <?php
 require_once(dirname(dirname(dirname(dirname(__FILE__)))). '/config.php');
+
+if (empty($CFG->enableportfolios)) {
+    print_error('disabled', 'portfolio');
+}
+
 require_once($CFG->libdir . '/portfoliolib.php');
 require_once($CFG->dirroot . '/mnet/lib.php');
 
+require_login();
+
 if (!$landed = optional_param('landed', false, PARAM_BOOL)) {
     $id = required_param('id', PARAM_INT);
     $exporter = portfolio_exporter::rewaken_object($id);
-- 
2.39.5