MDL-42131 editpdf: Add missing require_login() to entry pages

[moodle.git] / mod / assign / feedback / editpdf / ajax.php

diff --git a/mod/assign/feedback/editpdf/ajax.php b/mod/assign/feedback/editpdf/ajax.php
index 889b55d..1451d5a 100644 (file)
--- a/mod/assign/feedback/editpdf/ajax.php
+++ b/mod/assign/feedback/editpdf/ajax.php
@@ -26,11 +26,9 @@ use \assignfeedback_editpdf\document_services;
 use \assignfeedback_editpdf\page_editor;
 use \assignfeedback_editpdf\comments_quick_list;
 
 use \assignfeedback_editpdf\page_editor;
 use \assignfeedback_editpdf\comments_quick_list;
 

-if (!defined('AJAX_SCRIPT')) {
-    define('AJAX_SCRIPT', true);
-}
+define('AJAX_SCRIPT', true);

 
 

-require_once('../../../../config.php');
+require('../../../../config.php');

 require_once($CFG->dirroot . '/mod/assign/locallib.php');
 
 require_sesskey();
 require_once($CFG->dirroot . '/mod/assign/locallib.php');
 
 require_sesskey();


@@ -45,6 +43,8 @@ $context = \context_module::instance($cm->id);
 
 $assignment = new \assign($context, null, null);
 
 
 $assignment = new \assign($context, null, null);
 

+require_login($assignment->get_course(), false, $cm);
+

 if (!$assignment->can_view_submission($userid)) {
     print_error('nopermission');
 }
 if (!$assignment->can_view_submission($userid)) {
     print_error('nopermission');
 }