MDL-82390 badges: correct context check when deleting badges.

This commit is contained in:
Paul Holden 2024-07-04 19:22:02 +01:00 committed by Jenkins
parent 835505681c
commit 234d24dfea

View file

@ -107,9 +107,10 @@ if (!has_any_capability(array(
$PAGE->set_title($hdr); $PAGE->set_title($hdr);
$output = $PAGE->get_renderer('core', 'badges'); $output = $PAGE->get_renderer('core', 'badges');
if (($delete || $archive) && has_capability('moodle/badges:deletebadge', $PAGE->context)) { if ($delete || $archive) {
$badgeid = ($archive != 0) ? $archive : $delete; $badgeid = ($archive != 0) ? $archive : $delete;
$badge = new badge($badgeid); $badge = new badge($badgeid);
require_capability('moodle/badges:deletebadge', $badge->get_context());
if (!$confirm) { if (!$confirm) {
echo $output->header(); echo $output->header();
// Archive this badge? // Archive this badge?