Found MDL-40854 created by Tim Hunt and discussion thread here.
Thank you!
LTI and Moodle
External Tool Activity Ignores Permissions in 2.4+
This discussion has been locked because a year has elapsed since the last post. Please start a new discussion topic.