Validate permission on lp_report - refs #7150

10 years ago · 4c421ec2b7
parent d1992debd3
commit 4c421ec2b7
1 changed files with 4 additions and 0 deletions
--- a/main/newscorm/lp_report.php
+++ b/main/newscorm/lp_report.php
@ -7,6 +7,10 @@ require_once '../inc/global.inc.php';

 $isAllowedToEdit = api_is_allowed_to_edit(null, true);

+if (!$isAllowedToEdit) {
+    api_not_allowed(true);
+}
+
 $lpTable = Database::get_course_table(TABLE_LP_MAIN);

 $lpId = isset($_GET['lp_id']) ? boolval($_GET['lp_id']) : false;