moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-04 16:36:37 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

MDL-69093 enrol_manual: added check for allowed roles a user can assign

Browse source
This commit is contained in:
Víctor Déniz Falcón 2020-07-01 09:37:46 +01:00 • committed by Jenkins
parent 877a3f70d0
commit d07fb8b9e8
1 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
enrol/manual/ajax.php
View file

@ -100,6 +100,13 @@ switch ($action) {
if (empty($roleid)) { if (empty($roleid)) {
$roleid = null; $roleid = null;
} else {
if (!has_capability('moodle/role:assign', $context)) {
throw new enrol_ajax_exception('assignnotpermitted');
}
if (!array_key_exists($roleid, get_assignable_roles($context, ROLENAME_ALIAS, false))) {
throw new enrol_ajax_exception('invalidrole');
}
} }
if (empty($startdate)) { if (empty($startdate)) {