← Back to branch summary

~ubuntu-branches/ubuntu/trusty/moodle/trusty

« back to all changes in this revision

Viewing changes to mod/assignment/type/upload/assignment.class.php

  • Committer: Package Import Robot
  • Author(s): Thijs Kinkhorst
  • Date: 2014-01-21 13:40:52 UTC
  • mfrom: (1.1.13)
  • Revision ID: package-import@ubuntu.com-20140121134052-ym2qvsp2cd9vq0p6
Tags: 2.5.4-1
http://bugs.debian.org/735312
* New upstream release, fixing security issues:
  - MSA-14-0001 Config passwords visibility issue [CVE-2014-0008]
  - MSA-14-0002 Group constraints lacking in "login as" [CVE-2014-0009]
  - MSA-14-0003 CSRF vulnerability in profile fields [CVE-2014-0010]
* Move /var/lib/moodle directory into package.
* Revert back to bundled yui3. Unfortunately, version in Debian and
  of upstream are not compatible (closes: #735312).

Show diffs side-by-side

added added

removed removed

Lines of Context:
mod/assignment/type/upload/assignment.class.php
339
339
        $context = context_module::instance($this->cm->id);
340
340
 
341
341
        // Get ids of users enrolled in the given course.
342
 
        list($enroledsql, $params) = get_enrolled_sql($context, 'mod/assignment:view', $groupid);
 
342
        list($enroledsql, $params) = get_enrolled_sql($context, 'mod/assignment:submit', $groupid);
343
343
        $params['assignmentid'] = $this->cm->instance;
344
344
 
345
345
        $query = '';