Skip to content

Missing Context and Capability Validation in External Service #100

@volodymyrdovhan

Description

@volodymyrdovhan

Hello,

I found an issue with missing capabilities and context validation in the external services.

Please review the documentation for more details:
Context and Capability Checks - Moodle External Services

Image

Please add security checks based on the requirements:

// Perform security checks.
$context = context_course::instance($courseid);
self::validate_context($context);
require_capability(CAPABILITY_NAME, $context);

Metadata

Metadata

Assignees

Labels

blockingcomplianceNecesario para cumplimiento del pliego

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions