merged fix for MDL-7119, users with no capability should not see role…

…s tab
janschrage · Oct 20, 2006 · 20374d7 · 20374d7
1 parent ffd8a1c
commit 20374d7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/user/tabs.php b/user/tabs.php
@@ -182,7 +182,7 @@
 
     /// this needs permission checkings
 
-    if (!empty($showroles)) { // this variable controls whether this roles is showed, or not, so only user/view page should set this flag
+    if (!empty($showroles) && has_capability('moodle/role:assign',$usercontext)) { // this variable controls whether this roles is showed, or not, so only user/view page should set this flag
         $usercontext = get_context_instance(CONTEXT_USER, $user->id);
         $toprow[] = new tabobject('roles', $CFG->wwwroot.'/'.$CFG->admin.'/roles/assign.php?contextid='.$usercontext->id.'&amp;userid='.$user->id.'&amp;courseid='.$course->id
                               ,get_string('roles'));