From c9e29670779628fd4826e3ecb991e0f17a257de1 Mon Sep 17 00:00:00 2001
From: gustav_delius <gustav_delius>
Date: Sat, 8 May 2004 15:56:37 +0000
Subject: [PATCH] fixed bug 990 which allowed students to see grades even when
 they were not supposed to by typing in the URL

---
 course/grade.php | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/course/grade.php b/course/grade.php
index b1bf0ed5f1..9a66ab269c 100644
--- a/course/grade.php
+++ b/course/grade.php
@@ -1,16 +1,20 @@
 <?PHP // $Id$
       // Displays all grades for a student in a course
 
-	require_once("../config.php");
-	require_once("lib.php");
+    require_once("../config.php");
+    require_once("lib.php");
 
     require_variable($id);              // course id
 
     if (! $course = get_record("course", "id", $id)) {
         error("Course ID was incorrect");
     }
+    
+    if (!$course->showgrades) {
+        error("Grades are not available for students in this course");
+    }
 
-	require_login($course->id);
+    require_login($course->id);
 
     $strgrades = get_string("grades");
     $strgrade = get_string("grade");
-- 
2.39.5