Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-23550

get_my_courses doesn't properly generate the user accessdata when userid != $USER->id

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Won't Fix
    • 1.9.9
    • None
    • Libraries
    • None
    • Any
    • MOODLE_19_STABLE
    • Moderate

    Description

      Problem:
      When an administrator visits a user's profile page it can sometimes load a course list different from what the user sees.

      How to duplicate:

      • Override the permission moodle/course:view on a course
      • View any user profile not enrolled in the course and without a site level role
        • notice that the above course is not in the user's courses
      • login as the user and view the user profile
        • notice the above course now appears

      MDL-8902 This is a better solution than the attached patch then update user/view.php and replace get_my_courses with get_my_enrolled_courses

      Attachments

        Issue Links

          Activity

            People

              moodle.com Moodle HQ
              matt.meisberger Matt Meisberger (WCW)
              David Woloszyn, Huong Nguyen, Jake Dallimore, Meirza, Michael Hawkins, Raquel Ortega, Safat Shahin, Stevani Andolo
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: