|Topic:||moodle_enrol_external:role_assign() does not obey role assignment restrictions|
|Versions affected:||< 2.0.4, < 2.1.1 (1.9.x not affected)|
|Reported by:||Petr Škoda|
|Solution:||upgrade to 2.0.4 or 2.1.1|
|Workaround:||avoid using web services|
Not all roles may be assigned by everybody in all contexts, but this was not being checked.