Note: You are currently viewing documentation for Moodle 3.9. Up-to-date documentation for the latest stable version of Moodle may be available here: Permissions.

Permissions: Difference between revisions

From MoodleDocs
(course and activity permissions changes for Boost-based themes)
 
(12 intermediate revisions by 4 users not shown)
Line 6: Line 6:
==Course and activity permissions==
==Course and activity permissions==


[[File:Permissions.png|thumb|Course permissions]]Role permissions for a course can be changed in ''Settings > Course administration > Users > Permissions'' and for a particular activity in ''Administration > Activity administration > Permissions''.
[[File:Permissions.png|thumb|Course permissions]]Permissions for a course can be changed on the course page via the ''Actions menu > More > Users tab > Permissions'' (Boost-based themes) or ''Course administration > Users > Permissions'' (Classic-based themes).
 
Permissions for a particular activity can be changed on the activity page via the ''Actions menu > Permissions'' (Boost-based themes) or ''Activity administration > Permissions'' (Classic-based themes).


Click the Allow icon (+) opposite a capability to give permission to additional roles or the Prevent icon (X) to take away permission.
Click the Allow icon (+) opposite a capability to give permission to additional roles or the Prevent icon (X) to take away permission.
==Front page permissions==
Front page permissions can be changed in  ''Front page settings > Users > Permissions'' and for a particular activity in ''Activity administration > Permissions''.


==Block permissions==
==Block permissions==


Block permissions can be changed by:
To change role permissions for a block


# Turn editing on in the course
# Turn editing on in the course
# Click the assign roles icon (a face and mask) in the header of the block
# In the actions menu in the header of the block, click Permissions'.
# Scroll down to the settings block and click the Permissions link
 
[[File:Blockassign.png]]


==Checking permissions==
==Checking permissions==


[[Image:Check permissions.png|thumb|Check permissions]]The check permissions feature provides a method to view all roles both in the current context and higher contexts (in Moodle 2.3.2 onwards) and capabilities for a selected user based on their role assignments. These capabilities determine whether or not the selected user is allowed to perform associated tasks within the system or course.
[[Image:Check permissions.png|thumb|Check permissions]]The check permissions feature provides a method to view all roles both in the current context and higher contexts and capabilities for a selected user based on their role assignments. These capabilities determine whether or not the selected user is allowed to perform associated tasks within the system or course.


A teacher can check permissions for their course in ''Settings > Course administration > Users > Permissions > Check permissions'' and for a particular activity in ''Settings > Activity administration > Check permissions''.  
A teacher can check permissions for their course in ''Course administration > Users > Permissions > Check permissions'' and for a particular activity in ''Activity administration > Check permissions''.  


An administrator can check system permissions in ''Settings > Site administration > Users > Permissions > Check system permissions''.
An administrator can check system permissions in ''Site administration > Users > Permissions > Check system permissions''.


The [[Capabilities/moodle/role:review|review permissions for others capability]] (allowed for the default roles of manager, teacher and non-editing teacher) controls whether a user can check permissions.
The [[Capabilities/moodle/role:review|review permissions for others capability]] (allowed for the default roles of manager, teacher and non-editing teacher) controls whether a user can check permissions.


==Capability overview report==
==Capability overview report==
[[Image:26capabilityoverview.png|thumb|Capability overview multi-select]]
An administrator can generate a capability overview report in ''Site administration > Users > Permissions > Capability overview''.


An administrator can generate a capability overview report in ''Site Administration > Users > Permissions > Capability report''.
The report allows the administrator to select a capability and one or more roles.  The report will show the role and its permission level for that capability.  And if that capability was overridden for the role where in the site.  For example, it might show that the gradereport:user view capability for a student role is set at the system level as "Allow" and for Course 1 it is set to "Prohibit".


The report allows the administrator to select a capability and one or more roles.  The report will show the role and its permission level for that capability. And if that capability was overridden for the role where in the site. For example, it might show that the gradereport:user view capability for a student role is set at the system level as "Allow" and for Course 1 it is set to "Prohibit".
It is possible to select more than one capability with more than one role and have an overview of all.
 
{{New features}}In Moodle 3.9 onwards, permissions for two or more roles may be more easily compared by ticking the 'Show differences only' checkbox.


==See also==
==See also==
Line 42: Line 49:


[[eu:Sistemako_baimenak_aztertu]]
[[eu:Sistemako_baimenak_aztertu]]
[[fr:Vérifier les permissions]]
[[fr:Permissions]]
[[de:Rechte]]
[[de:Rechte]]
[[es:Permisos]]

Latest revision as of 06:54, 28 September 2020


Moodle allows specific roles to be able to change other specific role capabilities based on the context. For example, a teacher in a course may want all students (users with a student role) to be able to edit all forums in that course. Or a teacher may want all students in a specific forum to be able to edit that forum.

If you want to give a specific student the ability to edit a specific activity, see Override permissions.

Course and activity permissions

Course permissions

Permissions for a course can be changed on the course page via the Actions menu > More > Users tab > Permissions (Boost-based themes) or Course administration > Users > Permissions (Classic-based themes).

Permissions for a particular activity can be changed on the activity page via the Actions menu > Permissions (Boost-based themes) or Activity administration > Permissions (Classic-based themes).

Click the Allow icon (+) opposite a capability to give permission to additional roles or the Prevent icon (X) to take away permission.

Front page permissions

Front page permissions can be changed in Front page settings > Users > Permissions and for a particular activity in Activity administration > Permissions.

Block permissions

To change role permissions for a block

  1. Turn editing on in the course
  2. In the actions menu in the header of the block, click Permissions'.

Checking permissions

Check permissions

The check permissions feature provides a method to view all roles both in the current context and higher contexts and capabilities for a selected user based on their role assignments. These capabilities determine whether or not the selected user is allowed to perform associated tasks within the system or course.

A teacher can check permissions for their course in Course administration > Users > Permissions > Check permissions and for a particular activity in Activity administration > Check permissions.

An administrator can check system permissions in Site administration > Users > Permissions > Check system permissions.

The review permissions for others capability (allowed for the default roles of manager, teacher and non-editing teacher) controls whether a user can check permissions.

Capability overview report

Capability overview multi-select

An administrator can generate a capability overview report in Site administration > Users > Permissions > Capability overview.

The report allows the administrator to select a capability and one or more roles. The report will show the role and its permission level for that capability. And if that capability was overridden for the role where in the site. For example, it might show that the gradereport:user view capability for a student role is set at the system level as "Allow" and for Course 1 it is set to "Prohibit".

It is possible to select more than one capability with more than one role and have an overview of all.

New feature
in Moodle 3.9!
In Moodle 3.9 onwards, permissions for two or more roles may be more easily compared by ticking the 'Show differences only' checkbox.

See also