Course/import.php should check for teacher

moodle · Mar 2, 2005 · 53dc7cc · 53dc7cc
1 parent 3615b2b
commit 53dc7cc
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/course/import.php b/course/import.php
@@ -20,6 +20,10 @@
 
     require_login($course->id);
 
+    if (!isteacheredit($course->id)) {
+        error("You need to be a teacher or an admin to use this page");
+    }
+
     if ($from = get_record("course","id",$fromcourse)) {
         if (!empty($filename) && file_exists($CFG->dataroot.'/'.$filename) && !empty($SESSION->import_preferences)) {
             $restore = backup_to_restore_array($SESSION->import_preferences);