Security fix for grading Essays. Mentioned in MDL-6477

moodle · Sep 8, 2006 · 9f81189 · 9f81189
1 parent a12743a
commit 9f81189
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/mod/lesson/view.php b/mod/lesson/view.php
@@ -28,6 +28,17 @@
 
     require_login($course->id, false, $cm);
 
+    switch ($action) {
+        case 'essayview':
+        case 'essaygrade':
+        case 'updategrade':
+        case 'emailessay':
+            if (!isteacheredit($course->id)) {
+                error('You must be a teacher with editing rights to view this page');
+            }
+            break;
+    }
+
 /// Print the page header
 
     if ($course->category) {