Permalink
Browse files

MDL-38443 Assignment: Missing permissions check on downloadall submis…

…sions
  • Loading branch information...
1 parent a20eeda commit f23877abfbd019eee98f23e3fe9eebc246eed26b @damyon damyon committed with danpoltawski Mar 13, 2013
Showing with 2 additions and 0 deletions.
  1. +2 −0 mod/assign/locallib.php
View
2 mod/assign/locallib.php
@@ -2026,6 +2026,8 @@ private function download_submissions() {
// More efficient to load this here.
require_once($CFG->libdir.'/filelib.php');
+ require_capability('mod/assign:grade', $this->context);
+
// Load all users with submit.
$students = get_enrolled_users($this->context, "mod/assign:submit");

0 comments on commit f23877a

Please sign in to comment.