Fix access to users list for admins: allow platform admin to enter open courses (visibility 2). There was apparently a condition allowing admins to enter all courses but the ones open to the platform - loosely refs BT#11108

1.10.x
Yannick Warnier 9 years ago
parent d9a04b6aba
commit aeb1521fb7
  1. 2
      main/inc/local.inc.php
  2. 1
      main/user/user.php

@ -1250,7 +1250,7 @@ if ((isset($uidReset) && $uidReset) || (isset($cidReset) && $cidReset)) {
$courseCode,
$session_id
);
if (isset($user_id) && $isUserSubscribedInCourse === true && !api_is_anonymous($user_id)) {
if (isset($user_id) && ($is_platformAdmin || $isUserSubscribedInCourse === true) && !api_is_anonymous($user_id)) {
$is_allowed_in_course = true;
}
break;

@ -445,6 +445,7 @@ if (api_is_allowed_to_edit(null, true)) {
}
}
// $is_allowed_in_course is first defined in local.inc.php
if (!$is_allowed_in_course) {
api_not_allowed(true);
}

Loading…
Cancel
Save