Moodle in English: Restrict LTI to preconfigured tools only

LTI and Moodle

Restrict LTI to preconfigured tools only

This discussion has been locked because a year has elapsed since the last post. Please start a new discussion topic.

Restrict LTI to preconfigured tools only

by Adam Barbary - Thursday, October 11, 2018, 1:20 PM

It appears that anyone with a teaching role may add a new External tool instance in a course as long as they know the provider URL and any authentication details. However, I'd like to limit the addition of External tools to only those configured globally by the admin. I've played with the permissions, logged in as other users, but if the option to add a new instance is there, it can be configured to connect to any working LTI connector.

I've tried setting Add course-specific tool configurations to not set. But this doesn't seem to prevent a manually configured LTI connector. I also tried setting Add new external tool activities to not set, but this just prevents adding any LTI tool.

Am I missing something, or is this the only behaviour?

Cheers,

Adam

Re: Restrict LTI to preconfigured tools only

by Neil Stapleton - Friday, January 11, 2019, 9:17 PM

Hi Adam

I don't have a solution but thought I'd just say I feel your pain on this. We're now using 3 preconfigured LTI tools in our Moodle instance and I have them set to show as discrete items in the activity chooser. What's missing is the ability to make these available to only the roles I want to see them. What I ideally want is the ability to set permissions on each tool, in the way you can for any other activity or resource type.

As it is (and you describe) its only possible to set permission on the external tool, remove it and all the preconfigured ones go with it too. this is what I've done and I'm giving out External Tool capabilities to certain users on a needs basis. Not ideal.

What I might end up doing is hiding the External Tool in the chooser via code, but only if I can;t find another solution.

Have you looked for a tracker for this at all? If I get time I'll do a trawl and see what I can find. One of use should probably raise a tracker issue for it.

Best

Neil

Average of ratings: -