MDLSITE-1025 prevent group info access only in separate mode

fladi · Oct 6, 2010 · 01ebadf · 01ebadf
1 parent e7521e4
commit 01ebadf
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pluginfile.php b/pluginfile.php
@@ -529,7 +529,8 @@
     $groupid = (int)array_shift($args);
 
     $group = $DB->get_record('groups', array('id'=>$groupid, 'courseid'=>$course->id), '*', MUST_EXIST);
-    if (!has_capability('moodle/site:accessallgroups', $context) && !groups_is_member($group->id, $USER->id)) {
+    if (($course->groupmodeforce and $course->groupmode == SEPARATEGROUPS) and !has_capability('moodle/site:accessallgroups', $context) and !groups_is_member($group->id, $USER->id)) {
+        // do not allow access to separate group info if not member or teacher
         send_file_not_found();
     }