MDL-23613 fixed wrong access control

moodle · Aug 2, 2010 · 196c045 · 196c045
1 parent 470f4c3
commit 196c045
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/repository/repository_ajax.php b/repository/repository_ajax.php
@@ -39,8 +39,6 @@
     die(json_encode($err));
 }
 
-require_login();
-
 /// Parameters
 $action    = optional_param('action', '', PARAM_ALPHA);
 $repo_id   = optional_param('repo_id', 0, PARAM_INT);           // Repository ID
@@ -59,6 +57,10 @@
 $search_text   = optional_param('s', '', PARAM_CLEANHTML);
 $linkexternal  = optional_param('linkexternal', '', PARAM_ALPHA);
 
+list($context, $course, $cm) = get_context_info_array($contextid);
+require_login($course, false, $cm);
+$PAGE->set_context($context);
+
 /// Headers to make it not cacheable
 header('Cache-Control: no-cache, must-revalidate');
 header('Expires: Sat, 26 Jul 1997 05:00:00 GMT');