From 4c421ec2b71136322f9525f106616360d147f03d Mon Sep 17 00:00:00 2001 From: Angel Fernando Quiroz Campos Date: Mon, 14 Sep 2015 14:44:08 -0500 Subject: [PATCH] Validate permission on lp_report - refs #7150 --- main/newscorm/lp_report.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/main/newscorm/lp_report.php b/main/newscorm/lp_report.php index 142f594113..cae53f2c70 100644 --- a/main/newscorm/lp_report.php +++ b/main/newscorm/lp_report.php @@ -7,6 +7,10 @@ require_once '../inc/global.inc.php'; $isAllowedToEdit = api_is_allowed_to_edit(null, true); +if (!$isAllowedToEdit) { + api_not_allowed(true); +} + $lpTable = Database::get_course_table(TABLE_LP_MAIN); $lpId = isset($_GET['lp_id']) ? boolval($_GET['lp_id']) : false;