| commit | 1907f7e082f072ddf48ed2904892b35b9f847f3a | |
| author | Tim Hunt <T.J.Hunt@open.ac.uk> | |
| Mon, 13 Aug 2012 15:53:15 +0000 (13 16:53 +0100) | ||
| committer | Tim Hunt <T.J.Hunt@open.ac.uk> | |
| Mon, 13 Aug 2012 16:44:22 +0000 (13 17:44 +0100) | ||
| tree | 2674515fe420ae34140fadd52d467fa919da03a5 | treesnapshot (tar.gz zip) |
| parent | c36de79f5c625892e96f7e03c72bc7856ba7ac6f | commitdiff |
MDL-34862 question preview: improve preview ownership check.
Users should only be able to access their own quetion preview. In the
past, for reasons I can no longer remember, this was enforced
using the session. It is much better to set the question_usage to belong
to the user's context.
Users should only be able to access their own quetion preview. In the
past, for reasons I can no longer remember, this was enforced
using the session. It is much better to set the question_usage to belong
to the user's context.
| question/engine/questionusage.php | diffblobblamehistory | |
| question/preview.php | diffblobblamehistory |