moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-05 08:56:36 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Restricted teachers shouldn't even see this page

Browse source
This commit is contained in:
moodler 2004-08-03 10:15:23 +00:00
parent c600d8bdd7
commit 09e9588ee1
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

8
course/student.php
View file

@ -56,10 +56,14 @@
"$site->fullname", "$site->fullname",
"<a href=\"view.php?id=$course->id\">$course->shortname</a> -> $strassignstudents", ""); "<a href=\"view.php?id=$course->id\">$course->shortname</a> -> $strassignstudents", "");
/// Don't allow restricted teachers to even see this page (because it contains
/// a lot of email addresses and access to all student on the server
check_for_restricted_user($USER->username, "$CFG->wwwroot/course/view.php?id=$course->id");
/// Add a student if one is specified /// Add a student if one is specified
if (!empty($add)) { if (!empty($add)) {
check_for_restricted_user($USER->username, "$CFG->wwwroot/course/student.php?id=$course->id");
if ($course->enrolperiod) { if ($course->enrolperiod) {
$timestart = time(); $timestart = time();
$timeend = $timestart + $course->enrolperiod; $timeend = $timestart + $course->enrolperiod;
@ -74,7 +78,6 @@
/// Remove a student if one is specified. /// Remove a student if one is specified.
if (!empty($remove)) { if (!empty($remove)) {
check_for_restricted_user($USER->username, "$CFG->wwwroot/course/student.php?id=$course->id");
if (! unenrol_student($remove, $course->id)) { if (! unenrol_student($remove, $course->id)) {
error("Could not remove that student from this course!"); error("Could not remove that student from this course!");
} }
@ -83,7 +86,6 @@
/// Remove all students from specified course /// Remove all students from specified course
if (!empty($removeall)) { if (!empty($removeall)) {
check_for_restricted_user($USER->username, "$CFG->wwwroot/course/student.php?id=$course->id");
$students = get_course_students($course->id, "u.lastname ASC, u.firstname ASC"); $students = get_course_students($course->id, "u.lastname ASC, u.firstname ASC");
foreach ($students as $student) { foreach ($students as $student) {
if (! unenrol_student($student->id, $course->id)) { if (! unenrol_student($student->id, $course->id)) {