Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-23550

get_my_courses doesn't properly generate the user accessdata when userid != $USER->id

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Minor
    • Resolution: Won't Fix
    • 1.9.9
    • None
    • Libraries
    • None
    • Any
    • MOODLE_19_STABLE
    • Moderate

    Description

      Problem:
      When an administrator visits a user's profile page it can sometimes load a course list different from what the user sees.

      How to duplicate:

      • Override the permission moodle/course:view on a course
      • View any user profile not enrolled in the course and without a site level role
        • notice that the above course is not in the user's courses
      • login as the user and view the user profile
        • notice the above course now appears

      MDL-8902 This is a better solution than the attached patch then update user/view.php and replace get_my_courses with get_my_enrolled_courses

      Attachments

        1. mycourses.patch
          0.8 kB
          Matt Meisberger (WCW)

        Issue Links

          Activity

            People

              moodle.com moodle.com
              matt.meisberger Matt Meisberger (WCW)
              Amaia Anabitarte, Carlos Escobedo, Ferran Recio, Ilya Tregubov, Laurent David, Sara Arjona (@sarjona)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: