Hi,
as far as I understand from the External services security page: A Moodle user cannot be used to access certain external functions of a web service?
Could you please confirm that?
I would like to retrieve courses from Moodle through the web service. Is there a way to pull just the data the requesting user is allowed to view within Moodle as well?
Thank you
Jackie
Thanks Jerome.
I think I was a bit confused when I wrote the other post because I forgot to state the way of authentication.
It is clear to me that if I use a token and specify the user for the webservice, that he is allowed to access the service as far as his permission allows.
What I would like to achieve, is a basic authentication so that each user can just retrieve his own courses for example, meaning that a teacher cannot look inside the courses of other teachers. As far as I understood about this basic authentication, I would need to create new users for use with the webservice. Is that correct? If yes, is there a way to have just one user account for use with moodle and the werbservice?
Thank you.
Thank you very much. That helped me in so far that I can retrieve the token for my admin account. I see that this would be the right way to do but I can't work out the right way to set everything up for the teacher role.
I still find the whole users and role setting quite confusing. I added the permission of creating a token to the teacher role. However the teacher of a course still cannot create a token because he is missing this capability. Has it something to do with the context of the role? Could you please tell me what would be the right thing to do?
Regards
Ok, I tried both, but either I'm doing it wrong or something else doesn't work.
I added the two capabilities to the teacher role but then I still couldn't create a token with a teacher. I then changed the context of the teacher role to system which of course worked. I added the token for the teacher to my webservice client.php. However the teacher is then able to see every course. I removed the capabilities and the context setting and tried with your second suggestion but then I always get the error that I "cannot view the profile of this user". Also I don't have the path you mentioned above, just Site administration > Plugins > Web services > External services, where I could enable the mobile webservice.
I'm really lost with those user rights, roles and context even though it makes sense to me. I just can't incorporate what I need
Regards
jackie
Hi Jerome,
I already read that. I also managed to locate my error. It was in the function that was checking the context. I previously copied some code from the startattempt.php file in the quiz module. In there the context of the user was checked which in this case needed to be the course context. Now everything works as it should.
Thank you for your help and sorry for causing some confusion.
Best regards.
jackie
hey asha,
while "waiting for a reply" I can recommend you to go through http://docs.moodle.org/27/en/How_to_create_and_enable_a_web_service again.
As well have a look at the dialog on this page here, where jerome said:
> Hi Jackie,
Hi Malte Reißig,
Thankyou very much for your reply.
I am able to create token for user,i completed this step and i created webservise and i added all the webservises functions i need,but here my problem is i want to hide some sections in admin login and in teacher login i want to show only some sections
Through webservises by using user token is any way to get user role for that site.
please help me to fix this issue.
I am also facing same issue like for role "Student" I have set "Create User" permission "Prohibit" but still using token I am able to create user from student credentials throught REST API.
And we can only select one capability for single external service.
so token we get at login/token.php for service1, can we use it to call service2 ?
Can you help me with this issue ?
