Making sure user is logged in before they can see the tinymce

Bug 1460850

As we shouldn't be able to see/use it if we are anonymous user

Change-Id: I1e454bcbd17667c88650360cee82069801e7c36b
Signed-off-by: Robert Lyon <robertl@catalyst.net.nz>

htdocs/lib/mahara.php

@@ -3891,8 +3891,10 @@ function mahara_log($logname, $string) {
 
 function is_html_editor_enabled () {
     global $USER, $SESSION;
-    return ((!get_config('wysiwyg') && $USER->get_account_preference('wysiwyg')) ||
-        get_config('wysiwyg') == 'enable') && $SESSION->get('handheld_device') == false;
+    return (
+            (!get_config('wysiwyg') && $USER->get_account_preference('wysiwyg')) ||
+            (get_config('wysiwyg') == 'enable' && $USER->is_logged_in())
+           ) && $SESSION->get('handheld_device') == false;
 }
 
 /**