In short, when a user is creating a new course they can set
the ID number, shortname, fullname and summary. However, when
they merge a backup into a course they need the permissions to do so.

Changed in May 2016.

Merge branch 'install_28_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_28_STABLE

Merge branch 'install_28_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_28_STABLE

Merge branch 'install_28_STABLE' of https://git.in.moodle.com/amosbot/moodle-install into MOODLE_28_STABLE

Simey Lameze authored Jan 18, 2016 and Eloy Lafuente committed Mar 09, 2016

    Also unit tests were added to cover the new clean_data() method.

Simey Lameze authored Jan 18, 2016 and Eloy Lafuente committed Mar 09, 2016

    Also the get_property_definition() was created to get the property without retrieve the whole definition cache and
    unit tests were created to tests those new methods.

Cameron Ball authored Feb 11, 2016 and Eloy Lafuente committed Mar 08, 2016

Thank you to Zachary Durber for originally working on this issue.

Krista Koivisto authored Feb 04, 2016 and Eloy Lafuente committed Mar 08, 2016

When getting the navigation branch data through AJAX, require
login if forcelogin is set.

Travis Noll authored Dec 02, 2015 and Eloy Lafuente committed Mar 07, 2016

Singleview users must have Manage Grade permission to modify the
Exclude grade attribute.

David Mudrák authored Jan 18, 2016 and Eloy Lafuente committed Mar 07, 2016

This issue mostly affects the search form fields. Submitted values for
these fields are typically obtained via optional_param() with
PARAM_NOTAGS specified as the parameter type - see parse_search_field()
methods. Such values themselves are not safe enough to be printed back
directly into the HTML as they might contain malicious code.

While working on the patch, some other places with weak protection were
detected and fixed.

In case of the itemid parameters, the s() seems to be unnecessary but it
was added anyway as an extra protection (just in case the code flow
changes or the parts of the code are re-used elsewhere).