Don't allow send works to invtited users - refs BT#9070

main/work/upload.php

@@ -48,7 +48,7 @@ allowOnlySubscribedUser($user_id, $work_id, $course_id);
 $is_course_member = CourseManager::is_user_subscribed_in_real_or_linked_course($user_id, $course_code, $session_id);
 $is_course_member = $is_course_member || api_is_platform_admin();
 
-if ($is_course_member == false) {
+if ($is_course_member == false || api_is_invited_user()) {
     api_not_allowed(true);
 }
 

main/work/work.lib.php

@@ -2260,6 +2260,7 @@ function get_work_user_list(
         $sql = " $select
                 FROM $work_condition  $user_condition
                 WHERE $extra_conditions $where_condition $condition_session
+                    AND u.status != " . ROLE_INVITED . "
                 ORDER BY $column $direction";
 
         if (!empty($start) && !empty($limit)) {

main/work/work_list.php

@@ -73,7 +73,7 @@ Display :: display_header(null);
 
 echo '<div class="actions">';
 echo '<a href="'.api_get_path(WEB_CODE_PATH).'work/work.php?'.api_get_cidreq().'&origin='.$origin.'">'.Display::return_icon('back.png', get_lang('BackToWorksList'),'',ICON_SIZE_MEDIUM).'</a>';
-if (api_is_allowed_to_session_edit(false, true) && !empty($workId)) {
+if (api_is_allowed_to_session_edit(false, true) && !empty($workId) && !api_is_invited_user() ) {
     echo '<a href="'.api_get_path(WEB_CODE_PATH).'work/upload.php?'.api_get_cidreq().'&id='.$workId.'&origin='.$origin.'">';
     echo Display::return_icon('upload_file.png', get_lang('UploadADocument'), '', ICON_SIZE_MEDIUM).'</a>';
 }
@@ -112,6 +112,7 @@ $result = getWorkDateValidationStatus($work_data);
 echo $result['message'];
 $check_qualification = intval($my_folder_data['qualification']);
 
+if (!api_is_invited_user()) {
     if (!empty($work_data['enable_qualification']) && !empty($check_qualification)) {
         $type = 'simple';
 
@@ -185,5 +186,6 @@ $url = api_get_path(WEB_AJAX_PATH).'model.ajax.php?a=get_work_user_list&work_id=
         </script>
     <?php
     echo Display::grid_html('results');
+}
 
 Display :: display_footer();