Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.
|Versions affected:||3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions|
|Versions fixed:||3.11.5, 3.10.9 and 3.9.12|
|Reported by:||Deds Castillo|
|Tracker issue:||MDL-72772 Capability gradereport/user:view not always respected when navigating to a user's course grade report|