MDLSITE-1025 prevent group info access only in separate mode

diff --git a/pluginfile.php b/pluginfile.php
index 3146d60..b7d917c 100644 (file)
--- a/pluginfile.php
+++ b/pluginfile.php
@@ -529,7 +529,8 @@ if ($component === 'blog') {
     $groupid = (int)array_shift($args);
 
     $group = $DB->get_record('groups', array('id'=>$groupid, 'courseid'=>$course->id), '*', MUST_EXIST);
-    if (!has_capability('moodle/site:accessallgroups', $context) && !groups_is_member($group->id, $USER->id)) {
+    if (($course->groupmodeforce and $course->groupmode == SEPARATEGROUPS) and !has_capability('moodle/site:accessallgroups', $context) and !groups_is_member($group->id, $USER->id)) {
+        // do not allow access to separate group info if not member or teacher
         send_file_not_found();
     }