I noticed in moodle 2.3 an authenticated user can view all student enrolments for any non-hidden course on the course/index.php page.
Has anybody else experienced this? I'd like students to only be able to see student enrolment information for courses they are enroled in. In 2.2 only instructor enrolments were visible, now authenticated users can see all enrolments.