From aa2b293e8ecc6ee4a6a183d36499dacc2b5b379a Mon Sep 17 00:00:00 2001 From: Marina Glancy Date: Wed, 16 Jan 2013 17:58:15 +1100 Subject: [PATCH] MDL-37207 modchoosertoggle: added checks that user can update course --- course/renderer.php | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/course/renderer.php b/course/renderer.php index 281ebf69015..86d5ea104a4 100644 --- a/course/renderer.php +++ b/course/renderer.php @@ -64,8 +64,14 @@ class core_course_renderer extends plugin_renderer_base { // Add the module chooser toggle to the course page if ($modchoosertoggleadded || $this->page->state > moodle_page::STATE_PRINTING_HEADER || $this->page->course->id == SITEID || - !($coursenode = $this->page->settingsnav->find('courseadmin', navigation_node::TYPE_COURSE))) { + !$this->page->user_is_editing() || + !($context = context_course::instance($this->page->course->id)) || + !has_capability('moodle/course:update', $context) || + !course_ajax_enabled($this->page->course) || + !($coursenode = $this->page->settingsnav->find('courseadmin', navigation_node::TYPE_COURSE)) || + !$coursenode->get('editsettings')) { // too late or we are on site page or we could not find the course settings node + // or we are not allowed to edit return; } $modchoosertoggleadded = true; -- 2.17.1