MDL-34862 question preview: improve preview ownership check.
authorTim Hunt <T.J.Hunt@open.ac.uk>
Mon, 13 Aug 2012 15:53:15 +0000 (16:53 +0100)
committerTim Hunt <T.J.Hunt@open.ac.uk>
Mon, 13 Aug 2012 15:53:15 +0000 (16:53 +0100)
commit4c16e191e16941cf241a6f746fd27cbe6575bf5b
tree305a48b0cc881ce4709470f99cefc505fe70c850
parent87e9331d93041149535f13cad6fb4951f3bfbf0e
MDL-34862 question preview: improve preview ownership check.

Users should only be able to access their own quetion preview. In the
past, for reasons I can no longer remember, this was enforced
using the session. It is much better to set the question_usage to belong
to the user's context.
question/engine/questionusage.php
question/preview.php