"MDL-23917, fixed ignore_premission logic"

iFixit · Aug 26, 2010 · a85265f · a85265f
1 parent d45c1ee
commit a85265f
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/comment/comment_ajax.php b/comment/comment_ajax.php
@@ -31,13 +31,14 @@
 
 $action    = optional_param('action',    '', PARAM_ALPHA);
 
-$ignore_permission = false;
 // XXX: display comments in frontpage without login
 if ($context->id != get_context_instance(CONTEXT_COURSE, SITEID)->id
     or $action == 'add'
     or $action == 'delete') {
-    $ignore_permission = true;
+    $ignore_permission = false;
     require_login($course, true, $cm);
+} else {
+    $ignore_permission = true;
 }
 require_sesskey();