| Topic: | moodle_enrol_external:role_assign() does not obey role assignment restrictions |
| Severity: | Minor |
| Versions affected: | < 2.0.4, < 2.1.1 (1.9.x not affected) |
| Reported by: | Petr Škoda |
| Issue no.: | MDL-28350 |
| Solution: | upgrade to 2.0.4 or 2.1.1 |
| Workaround: | avoid using web services |
Description:
Not all roles may be assigned by everybody in all contexts, but this was not being checked.