chamilo / chamilo-lms

    }

    // grating a right

    if ($action == 'grant') {

        $sql = "INSERT INTO $table (c_id, $id_field,tool,action) VALUES ($course_id, '".Database::escape_string($id)."','".Database::escape_string($tool)."','".Database::escape_string($permission)."')";

        $result = Database::query($sql);

        if ($result) {

            $result_message = get_lang('PermissionGranted');

        }

    }

    if ($action == 'revoke') {

        $sql = "DELETE FROM $table WHERE c_id = $course_id AND $id_field = '".Database::escape_string($id)."' AND tool='".Database::escape_string($tool)."' AND action='".Database::escape_string($permission)."'";

        $result = Database::query($sql);

            $result_message = get_lang('PermissionGranted');

        }

    }

    if ($action == 'revoke') {

        $sql = "DELETE FROM $table WHERE c_id = $course_id AND $id_field = '".Database::escape_string($id)."' AND tool='".Database::escape_string($tool)."' AND action='".Database::escape_string($permission)."'";

        $result = Database::query($sql);

        if ($result) {

            $result_message = get_lang('PermissionRevoked');

        }

    }

    return $result_message;

}

    }

    // grating a right

    if ($action == 'grant') {

        $sql = "INSERT INTO $table (c_id, role_id, scope, $id_field) VALUES ($course_id, '".Database::escape_string($role_id)."','".Database::escape_string($scope)."','".Database::escape_string($id)."')";

        $result = Database::query($sql);

        if ($result) {

            $result_message = get_lang('RoleGranted');

        }

    }

    if ($action == 'revoke') {

        $sql = "DELETE FROM $table WHERE c_id = $course_id AND $id_field = '".Database::escape_string($id)."' AND role_id='".Database::escape_string($role_id)."'";

        }

    }

    if ($action == 'revoke') {

        $sql = "DELETE FROM $table WHERE c_id = $course_id AND $id_field = '".Database::escape_string($id)."' AND role_id='".Database::escape_string($role_id)."'";

        $result = Database::query($sql);

        if ($result) {

            $result_message = get_lang('RoleRevoked');

        }

    }

    return $result_message;

}