MDL-11064, users can't see teacher's profile

This commit is contained in:
toyomoyo 2007-09-06 07:07:58 +00:00
parent 6673f18b1c
commit 41fe0508eb

View file

@ -43,13 +43,6 @@
require_login($course->id); require_login($course->id);
} }
} }
// make sure user can view this student's profile
if ($USER->id != $user->id
&& !has_capability('moodle/user:viewdetails', $coursecontext)
&& !has_capability('moodle/user:viewdetails', $usercontext)) {
print_error('cannotviewprofile');
}
if (!empty($CFG->forceloginforprofiles)) { if (!empty($CFG->forceloginforprofiles)) {
require_login(); require_login();
@ -77,6 +70,12 @@
exit; exit;
} }
} else { // Normal course } else { // Normal course
// check capabilities
if (!has_capability('moodle/user:viewdetails', $coursecontext) &&
!has_capability('moodle/user:viewdetails', $usercontext)) {
print_error('cannotviewprofile');
}
if (!has_capability('moodle/course:view', $coursecontext, $user->id, false)) { if (!has_capability('moodle/course:view', $coursecontext, $user->id, false)) {
if (has_capability('moodle/course:view', $coursecontext)) { if (has_capability('moodle/course:view', $coursecontext)) {
print_header("$strpersonalprofile: ", "$strpersonalprofile: ", print_header("$strpersonalprofile: ", "$strpersonalprofile: ",