Course: restrict access to course's about page only if user is connec…

…ted if course_catalog_published is false -refs BT#21299
ywarnier · Dec 20, 2023 · 36dd77a · 36dd77a
1 parent d0cea35
commit 36dd77a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/main/course_info/about.php b/main/course_info/about.php
@@ -18,6 +18,10 @@
 
 require_once __DIR__.'/../inc/global.inc.php';
 
+if (api_get_setting('course_catalog_published') != 'true' && api_is_anonymous()) {
+    api_not_allowed(true);
+}
+
 $courseId = isset($_GET['course_id']) ? (int) $_GET['course_id'] : 0;
 
 if (empty($courseId)) {