LTI consumer users are free to explore provider site

Re: LTI consumer users are free to explore provider site

by Brian Merritt -
Number of replies: 0
Picture of Particularly helpful Moodlers
Hi all

Is it worth adding this as a tracker for Moodle? Expected behaviour as an LTI provider is to

1. The Moodle LTI provider to have an option to force embed (needed both when sharing a course and when users are higher in privilege than student)
2. LTI consumer user should not be able to see "the rest of the site"