MDL-49204 core_message: Checking current user
authorDavid Monllao <davidm@moodle.com>
Tue, 3 Mar 2015 04:38:46 +0000 (12:38 +0800)
committerAndrew Nicols <andrew@nicols.co.uk>
Wed, 4 Mar 2015 02:05:26 +0000 (10:05 +0800)
message/index.php

index 40b2377..1b458de 100644 (file)
@@ -114,9 +114,7 @@ $user2realuser = !empty($user2) && core_user::is_real_user($user2->id);
 $showactionlinks = $showactionlinks && $user2realuser;
 $systemcontext = context_system::instance();
 
-// Is the user involved in the conversation?
-// Do they have the ability to read other user's conversations?
-if (!message_current_user_is_involved($user1, $user2) && !has_capability('moodle/site:readallmessages', $systemcontext)) {
+if ($currentuser === false && !has_capability('moodle/site:readallmessages', $systemcontext)) {
     print_error('accessdenied','admin');
 }