There is no answer to this. (There should be, MDL-37949)
Tim Hunt
Posts made by Tim Hunt
The default permsissions are only read when a capability is first created.
Once the plugin is installed, admins might have customised their role definitions. It would be terrible if Moodle overrwrote that just because a plugin was updated - so Moodle does not do that.
Once the plugin is installed, admins might have customised their role definitions. It would be terrible if Moodle overrwrote that just because a plugin was updated - so Moodle does not do that.
This looks like a bug that slipped through 4.4 testing. Please create a tracker issue.
Both approaches work. There is no 'best'. It depends.
There seems to be a major outage at the moment (see https://status.matrix.org/) which is affecting Moodle dev chat. Really, the only point of this post it to share that status page link. Hopefully they will get it sorted soon.