Issue #87 Do not display content if a user does not have permission

Syxton · Oct 19, 2023 · e2ebf0b · e2ebf0b
1 parent 96038c1
commit e2ebf0b
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/block_massaction.php b/block_massaction.php
@@ -91,6 +91,12 @@ public function get_content(): stdClass {
         $this->content->text = '';
         $this->content->footer = '';
 
+        $blockcontext = context_block::instance($this->instance->id);
+        if (!has_capability('block/massaction:use', $blockcontext)) {
+            $this->content->text = get_string('nopermissions', 'error', get_string('massaction:use', 'block_massaction'));
+            return $this->content;
+        }
+
         if ($this->page->user_is_editing()) {
 
             $applicableformatkey = 'course-view-' . $COURSE->format;