Course settings:
Course visibility: Hide
Role: Student
moodle/course:viewhiddencourses: Not set (default)
Role: Authenticated user
moodle/course:viewhiddencourses: Not set (default)
Even with the settings above, a user enrolled in the course can view and access it. (view image - gray background)
In older versions once configured as hidden, no user (enrolled or not) would be able to view or access the course.
Has anything changed since then?
Ricardo
