Add session_classes_tab_disable conf setting - refs BT#19992

Disable tab to add classes in course session for non-admins

main/inc/lib/usermanager.lib.php

@@ -6677,12 +6677,19 @@ SQL;
                     'url' => api_get_path(WEB_CODE_PATH).'group/group.php?'.api_get_cidreq(),
                     'content' => get_lang('Groups'),
                 ],
-                [
+                'classes' => [
                     'url' => $userPath.'class.php?'.api_get_cidreq(),
                     'content' => get_lang('Classes'),
                 ],
             ];
 
+            if (api_get_configuration_value('session_classes_tab_disable')
+                && !api_is_platform_admin()
+                && api_get_session_id()
+            ) {
+                unset($headers['classes']);
+            }
+
             return Display::tabsOnlyLink($headers, $optionSelected);
         }
 

main/install/configuration.dist.php

@@ -2239,6 +2239,9 @@ INSERT INTO `extra_field` (`extra_field_type`, `field_type`, `variable`, `displa
 // Restrict the list of students to subscribe in the course session
 //$_configuration['session_course_users_subscription_limited_to_session_users'] = false;
 
+// Disable tab to add classes in course session for non-admins
+//$_configuration['session_classes_tab_disable'] = false;
+
 // KEEP THIS AT THE END
 // -------- Custom DB changes
 // Add user activation by confirmation email

main/user/class.php

@@ -5,6 +5,8 @@
 require_once __DIR__.'/../inc/global.inc.php';
 $this_section = SECTION_COURSES;
 
+$sessionId = api_get_session_id();
+
 api_protect_course_script(true, false, 'user');
 
 if ('false' === api_get_setting('allow_user_course_subscription_by_course_admin')) {
@@ -13,6 +15,10 @@ if ('false' === api_get_setting('allow_user_course_subscription_by_course_admin'
     }
 }
 
+if (api_get_configuration_value('session_classes_tab_disable') && !api_is_platform_admin() && $sessionId) {
+    api_not_allowed(true);
+}
+
 $tool_name = get_lang('Classes');
 $htmlHeadXtra[] = api_get_jqgrid_js();
 
@@ -38,7 +44,7 @@ $actionsLeft = '';
 $actionsRight = '';
 $usergroup = new UserGroup();
 $actions = '';
-$sessionId = api_get_session_id();
+
 if (api_is_allowed_to_edit()) {
     if ($type === 'registered') {
         $actionsLeft .= '<a href="class.php?'.api_get_cidreq().'&type=not_registered">'.