all pages are accessible anonymously. about moodle-local_pages HOT 5 CLOSED

cool - that should make it easier for others to review too..

I'd probably simplify it to a single line myself:
if (!empty($custompage->accesslevel)) {

but that's just me being picky... :-)

from moodle-local_pages.

I have updated the readme in this Repo and will update the content in Moodle to Make this clear.

Page access is controlled when the page is created, capabilites can used to restrict/allow access at each page level.

from moodle-local_pages.

Cool - It looked like you could just pass a different id to the index script and load every page you wanted to. Ideally it would be good if there was some form of check in the top of index.php to see if the page is public or not. If not public then use require login and capability checks?

from moodle-local_pages.

// Function throws exception if query string is not provided
$pageid = required_param('id', PARAM_INT);

// Can do this. Print your own custom message.
if (!($page = $DB->get_record('local_pages_page', ['id' => $pageid])) {
    // Print some custom error message using a lang string.
    print_error('someidentifier', 'local_pages');
}

// Or this. Use the function get record to throw exception if record don't exist
$page = $DB->get_record('local_pages_page', ['id' => $pageid], '*', MUST_EXIST);

// Use whatever property indicates that the page is public or not
if (!$page->ispublic) {
    require_login();
}

from moodle-local_pages.

Have updated the page index to passback if a cability is needed - require login is required if the page required a capability.

// Set the page layout.
$custompage = custompage::load($pageid);

// Check if the page has an access level requirement.
$accesslevel = $custompage->accesslevel;
if ($accesslevel != '') {
require_login();
}

An id is not required to load a page, if the site supports htaccess files, the page can be loaded by a url as well - making for cleaner urls to load pages

from moodle-local_pages.