MDL-21830 Prevent users from viewing names of all other site users - only teachers...

diff --git a/user/view.php b/user/view.php
index 318183b..a0701d4 100644 (file)
--- a/user/view.php
+++ b/user/view.php
@@ -130,7 +130,7 @@ if (!$currentuser) {
         }
 
         if (!has_capability('moodle/course:view', $coursecontext, $user->id, false)) {
-            if (has_capability('moodle/course:view', $coursecontext)) {
+            if (has_capability('moodle/role:assign', $coursecontext)) {
                 $PAGE->navbar->add($fullname);
                 echo $OUTPUT->heading(get_string('notenrolled', $fullname));
             } else {