Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

Security fix for grading Essays. Mentioned in MDL-6477

  • Loading branch information...
commit 9f811896b829e0f171e5537ab018e6ceff6f9736 1 parent a12743a
mark-nielsen authored
Showing with 11 additions and 0 deletions.
  1. +11 −0 mod/lesson/view.php
View
11 mod/lesson/view.php
@@ -28,6 +28,17 @@
require_login($course->id, false, $cm);
+ switch ($action) {
+ case 'essayview':
+ case 'essaygrade':
+ case 'updategrade':
+ case 'emailessay':
+ if (!isteacheredit($course->id)) {
+ error('You must be a teacher with editing rights to view this page');
+ }
+ break;
+ }
+
/// Print the page header
if ($course->category) {
Please sign in to comment.
Something went wrong with that request. Please try again.