From 01ebadfbb6e3b72a519cde07a822a7e3b21438f6 Mon Sep 17 00:00:00 2001 From: Petr Skoda Date: Wed, 6 Oct 2010 20:15:50 +0000 Subject: [PATCH] MDLSITE-1025 prevent group info access only in separate mode --- pluginfile.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/pluginfile.php b/pluginfile.php index 3146d60e5ce..b7d917c8f07 100644 --- a/pluginfile.php +++ b/pluginfile.php @@ -529,7 +529,8 @@ if ($component === 'blog') { $groupid = (int)array_shift($args); $group = $DB->get_record('groups', array('id'=>$groupid, 'courseid'=>$course->id), '*', MUST_EXIST); - if (!has_capability('moodle/site:accessallgroups', $context) && !groups_is_member($group->id, $USER->id)) { + if (($course->groupmodeforce and $course->groupmode == SEPARATEGROUPS) and !has_capability('moodle/site:accessallgroups', $context) and !groups_is_member($group->id, $USER->id)) { + // do not allow access to separate group info if not member or teacher send_file_not_found(); } -- 2.17.1