danmarsden/moodle-mod_attendance — pull request #8 by NeillM (2013-08-29 13:23:20+00:00)
Title: Security fix for unprivileged access to attendance records

In the current code if a student can gain access to the attendance record of any other student on a course by adding

studentid=

to the URL for viewing the attendance activity. This patch ensures that only users with permissions to modify the activity can see other user's attendance records.