Permalink
Browse files

MDL-21830 Prevent users from viewing names of all other site users - …

…only teachers with role assign see the full name of not enrolled users when trying to access the profile
  • Loading branch information...
1 parent 4bbeff3 commit 4597ce9ca5ca4f13bb75c3d8b117c2bf469745d0 @skodak skodak committed Mar 18, 2010
Showing with 1 addition and 1 deletion.
  1. +1 −1 user/view.php
View
@@ -77,7 +77,7 @@
}
if (!has_capability('moodle/course:view', $coursecontext, $user->id, false)) {
- if (has_capability('moodle/course:view', $coursecontext)) {
+ if (has_capability('moodle/role:assign', $coursecontext)) {
print_header("$strpersonalprofile: ", "$strpersonalprofile: ",
"<a href=\"../course/view.php?id=$course->id\">$course->shortname</a> ->
<a href=\"index.php?id=$course->id\">$strparticipants</a> -> $fullname",

0 comments on commit 4597ce9

Please sign in to comment.