| commit | 7bdb9d877d12a7e16e6c30a288f91678dde26eec | |
| author | Jun Pataleta <jun@moodle.com> | |
| Sat, 12 May 2018 02:18:04 +0000 (12 10:18 +0800) | ||
| committer | David Monllao <davidm@moodle.com> | |
| Sun, 13 May 2018 14:03:21 +0000 (13 16:03 +0200) | ||
| tree | 40ab31a8c720c6829dbe0fee465fbbfc8d68c583 | treesnapshot (tar.gz zip) |
| parent | 0f7fb9874713aed5283a536cf8718acf7d759a66 | commitdiff |
MDL-62409 tool_dataprivacy: Properly validate data request creation
Creating data requests
* Add capability check when creating data requests for another user.
Ad-hoc task that processes pending data requests
* Check if the requesting user has the capability to create the data
request for another user. Reject otherwise.
Ad-hoc task that processes approved data requests
* Validate that the requester can receive the notification about the
data request processing results.
* Do not send the confirmation link to DPOs/admins
Creating data requests
* Add capability check when creating data requests for another user.
Ad-hoc task that processes pending data requests
* Check if the requesting user has the capability to create the data
request for another user. Reject otherwise.
Ad-hoc task that processes approved data requests
* Validate that the requester can receive the notification about the
data request processing results.
* Do not send the confirmation link to DPOs/admins