From 593bebe09970a217676c100e56edaf2f861bb489 Mon Sep 17 00:00:00 2001
From: jerome <jerome>
Date: Thu, 8 Jan 2009 07:40:01 +0000
Subject: [PATCH] online user block MDL-15325 Online Users Block didn't perform
 capability check when displaying messaging icon, merged from 19

---
 blocks/online_users/block_online_users.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/blocks/online_users/block_online_users.php b/blocks/online_users/block_online_users.php
index caa25307e7b09..7c65c47732ae9 100644
--- a/blocks/online_users/block_online_users.php
+++ b/blocks/online_users/block_online_users.php
@@ -153,6 +153,7 @@ function get_content() {
                     $this->content->text .= $user->fullname.'</a></div>';
                 }
                 if (!empty($USER->id) and ($USER->id != $user->id) and !empty($CFG->messaging) and
+                    has_capability('moodle/site:sendmessage', $context) and
                     !isguest() and $user->username != 'guest') {  // Only when logged in and messaging active etc
                     $this->content->text .= '<div class="message"><a title="'.get_string('messageselectadd').'" href="'.$CFG->wwwroot.'/message/discussion.php?id='.$user->id.'" onclick="this.target=\'message_'.$user->id.'\';return openpopup(\'/message/discussion.php?id='.$user->id.'\', \'message_'.$user->id.'\', \'menubar=0,location=0,scrollbars,status,resizable,width=400,height=500\', 0);">'
                         .'<img class="iconsmall" src="'.$CFG->pixpath.'/t/message.gif" alt="'. get_string('messageselectadd') .'" /></a></div>';