MDL-14627 fixed file_browser access control

diff --git a/mod/folder/lib.php b/mod/folder/lib.php
index f8cd876..3cffd25 100644 (file)
--- a/mod/folder/lib.php
+++ b/mod/folder/lib.php
@@ -244,6 +244,9 @@ function folder_get_file_info($browser, $areas, $course, $cm, $context, $fileare
 
 
     if ($filearea === 'content') {
+        if (!has_capability('mod/folder:view', $context)) {
+            return NULL;
+        }
         $fs = get_file_storage();
 
         $filepath = is_null($filepath) ? '/' : $filepath;