Minor - fix access, don't check the course id see BT#14262

jmontoyaa · jmontoyaa · commit bd939880b7eb · 2018-05-08T10:31:39.000+02:00
diff --git a/whoisonlinesession.php b/whoisonlinesession.php
@@ -16,15 +16,14 @@
 }
 
 $sessionId = api_get_session_id();
-$courseId = api_get_course_int_id();
 
 if (empty($sessionId)) {
     api_not_allowed(true);
 }
 
 $allow = api_is_platform_admin(true) ||
-    api_is_coach($sessionId, $courseId, false) ||
-    SessionManager::get_user_status_in_course_session(api_get_user_id(), $courseId, $sessionId) == 2;
+    api_is_coach($sessionId, null, false) ||
+    SessionManager::isUserSubscribedAsStudent($sessionId, api_get_user_id());
 
 if (!$allow) {
     api_not_allowed(true);

Original file line number	Diff line number	Diff line change
`@@ -16,15 +16,14 @@`
`16`	`16`	`}`
`17`	`17`
`18`	`18`	`$sessionId = api_get_session_id();`
`19`		`-$courseId = api_get_course_int_id();`
`20`	`19`
`21`	`20`	`if (empty($sessionId)) {`
`22`	`21`	`api_not_allowed(true);`
`23`	`22`	`}`
`24`	`23`
`25`	`24`	`$allow = api_is_platform_admin(true) \|\|`
`26`		`- api_is_coach($sessionId, $courseId, false) \|\|`
`27`		`- SessionManager::get_user_status_in_course_session(api_get_user_id(), $courseId, $sessionId) == 2;`
	`25`	`+ api_is_coach($sessionId, null, false) \|\|`
	`26`	`+ SessionManager::isUserSubscribedAsStudent($sessionId, api_get_user_id());`
`28`	`27`
`29`	`28`	`if (!$allow) {`
`30`	`29`	`api_not_allowed(true);`