lib/db/access.php

   1 <?php
   2 //
   3 // Capability definitions for Moodle core.
   4 //
   5 // The capabilities are loaded into the database table when the module is
   6 // installed or updated. Whenever the capability definitions are updated,
   7 // the module version number should be bumped up.
   8 //
   9 // The system has four possible values for a capability:
  10 // CAP_ALLOW, CAP_PREVENT, CAP_PROHIBIT, and inherit (not set).
  11 //
  12 //
  13 // CAPABILITY NAMING CONVENTION
  14 //
  15 // It is important that capability names are unique. The naming convention
  16 // for capabilities that are specific to modules and blocks is as follows:
  17 //   [mod/block]/<component_name>:<capabilityname>
  18 //
  19 // component_name should be the same as the directory name of the mod or block.
  20 //
  21 // Core moodle capabilities are defined thus:
  22 //    moodle/<capabilityclass>:<capabilityname>
  23 //
  24 // Examples: mod/forum:viewpost
  25 //           block/recent_activity:view
  26 //           moodle/site:deleteuser
  27 //
  28 // The variable name for the capability definitions array follows the format
  29 //   $<componenttype>_<component_name>_capabilities
  30 //
  31 // For the core capabilities, the variable is $moodle_capabilities.
  32
  33
  34 $moodle_capabilities = array(
  35
  36     'moodle/site:doanything' => array(
  37
  38         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS | RISK_CONFIG,
  39
  40         'captype' => 'admin',
  41         'contextlevel' => CONTEXT_SYSTEM
  42     ),
  43
  44     'moodle/legacy:guest' => array(
  45
  46         'captype' => 'legacy',
  47         'contextlevel' => CONTEXT_SYSTEM
  48     ),
  49
  50     'moodle/legacy:user' => array(
  51
  52         'captype' => 'legacy',
  53         'contextlevel' => CONTEXT_SYSTEM
  54     ),
  55
  56     'moodle/legacy:student' => array(
  57
  58         'riskbitmask' => RISK_SPAM,
  59
  60         'captype' => 'legacy',
  61         'contextlevel' => CONTEXT_SYSTEM
  62     ),
  63
  64
  65     'moodle/legacy:teacher' => array(
  66
  67         'riskbitmask' => RISK_SPAM | RISK_PERSONAL,
  68
  69         'captype' => 'legacy',
  70         'contextlevel' => CONTEXT_SYSTEM
  71     ),
  72
  73
  74     'moodle/legacy:editingteacher' => array(
  75
  76         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS,
  77
  78         'captype' => 'legacy',
  79         'contextlevel' => CONTEXT_SYSTEM
  80     ),
  81
  82
  83     'moodle/legacy:coursecreator' => array(
  84
  85         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS,
  86
  87         'captype' => 'legacy',
  88         'contextlevel' => CONTEXT_SYSTEM
  89     ),
  90
  91
  92     'moodle/legacy:admin' => array(
  93
  94         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS | RISK_CONFIG,
  95
  96         'captype' => 'legacy',
  97         'contextlevel' => CONTEXT_SYSTEM
  98     ),
  99
 100
 101     'moodle/site:config' => array(
 102
 103         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS | RISK_CONFIG,
 104
 105         'captype' => 'write',
 106         'contextlevel' => CONTEXT_SYSTEM,
 107         'legacy' => array(
 108             'admin' => CAP_ALLOW
 109         )
 110     ),
 111
 112     'moodle/site:readallmessages' => array(
 113
 114         'riskbitmask' => RISK_PERSONAL,
 115
 116         'captype' => 'read',
 117         'contextlevel' => CONTEXT_SYSTEM,
 118         'legacy' => array(
 119             'admin' => CAP_ALLOW,
 120             'editingteacher' => CAP_ALLOW
 121         )
 122     ),
 123
 124     'moodle/site:approvecourse' => array(
 125
 126         'riskbitmask' => RISK_XSS,
 127
 128         'captype' => 'write',
 129         'contextlevel' => CONTEXT_SYSTEM,
 130         'legacy' => array(
 131             'admin' => CAP_ALLOW
 132         )
 133     ),
 134
 135     'moodle/site:import' => array(
 136
 137         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS,
 138
 139         'captype' => 'write',
 140         'contextlevel' => CONTEXT_SYSTEM,
 141         'legacy' => array(
 142             'editingteacher' => CAP_ALLOW,
 143             'admin' => CAP_ALLOW
 144         )
 145     ),
 146
 147     'moodle/site:backup' => array(
 148
 149         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS,
 150
 151         'captype' => 'write',
 152         'contextlevel' => CONTEXT_SYSTEM,
 153         'legacy' => array(
 154             'editingteacher' => CAP_ALLOW,
 155             'admin' => CAP_ALLOW
 156         )
 157     ),
 158
 159     'moodle/site:restore' => array(
 160
 161         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS,
 162
 163         'captype' => 'write',
 164         'contextlevel' => CONTEXT_SYSTEM,
 165         'legacy' => array(
 166             'editingteacher' => CAP_ALLOW,
 167             'admin' => CAP_ALLOW
 168         )
 169     ),
 170
 171     'moodle/site:manageblocks' => array(
 172
 173         'riskbitmask' => RISK_SPAM | RISK_XSS,
 174
 175         'captype' => 'write',
 176         'contextlevel' => CONTEXT_SYSTEM,
 177         'legacy' => array(
 178             'editingteacher' => CAP_ALLOW,
 179             'admin' => CAP_ALLOW
 180         )
 181     ),
 182
 183     'moodle/site:accessallgroups' => array(
 184
 185         'captype' => 'read',
 186         'contextlevel' => CONTEXT_SYSTEM,
 187         'legacy' => array(
 188             'teacher' => CAP_ALLOW,
 189             'editingteacher' => CAP_ALLOW,
 190             'admin' => CAP_ALLOW
 191         )
 192     ),
 193
 194     'moodle/site:viewfullnames' => array(
 195
 196         'captype' => 'read',
 197         'contextlevel' => CONTEXT_SYSTEM,
 198         'legacy' => array(
 199             'teacher' => CAP_ALLOW,
 200             'editingteacher' => CAP_ALLOW,
 201             'admin' => CAP_ALLOW
 202         )
 203     ),
 204
 205     'moodle/site:viewreports' => array(
 206
 207         'riskbitmask' => RISK_PERSONAL,
 208
 209         'captype' => 'read',
 210         'contextlevel' => CONTEXT_SYSTEM,
 211         'legacy' => array(
 212             'teacher' => CAP_ALLOW,
 213             'editingteacher' => CAP_ALLOW,
 214             'admin' => CAP_ALLOW
 215         )
 216     ),
 217
 218     'moodle/site:trustcontent' => array(
 219
 220         'riskbitmask' => RISK_XSS,
 221
 222         'captype' => 'write',
 223         'contextlevel' => CONTEXT_SYSTEM,
 224         'legacy' => array(
 225             'editingteacher' => CAP_ALLOW,
 226             'admin' => CAP_ALLOW
 227         )
 228     ),
 229
 230     'moodle/site:uploadusers' => array(
 231
 232         'riskbitmask' => RISK_SPAM | RISK_PERSONAL,
 233
 234         'captype' => 'write',
 235         'contextlevel' => CONTEXT_SYSTEM,
 236         'legacy' => array(
 237             'admin' => CAP_ALLOW
 238         )
 239     ),
 240
 241     'moodle/site:langeditmaster' => array(
 242
 243         'riskbitmask' => RISK_CONFIG | RISK_XSS,
 244
 245         'captype' => 'write',
 246         'contextlevel' => CONTEXT_SYSTEM,
 247         'legacy' => array(
 248             'admin' => CAP_PREVENT
 249         )
 250     ),
 251
 252     'moodle/site:langeditlocal' => array(
 253
 254         'riskbitmask' => RISK_CONFIG | RISK_XSS,
 255
 256         'captype' => 'write',
 257         'contextlevel' => CONTEXT_SYSTEM,
 258         'legacy' => array(
 259             'admin' => CAP_ALLOW
 260         )
 261     ),
 262
 263
 264     'moodle/user:create' => array(
 265
 266         'riskbitmask' => RISK_SPAM | RISK_PERSONAL,
 267
 268         'captype' => 'write',
 269         'contextlevel' => CONTEXT_SYSTEM,
 270         'legacy' => array(
 271             'admin' => CAP_ALLOW
 272         )
 273     ),
 274
 275     'moodle/user:delete' => array(
 276
 277         'riskbitmask' => RISK_PERSONAL,
 278
 279         'captype' => 'write',
 280         'contextlevel' => CONTEXT_SYSTEM,
 281         'legacy' => array(
 282             'admin' => CAP_ALLOW
 283         )
 284     ),
 285
 286     'moodle/user:update' => array(
 287
 288         'riskbitmask' => RISK_SPAM | RISK_PERSONAL,
 289
 290         'captype' => 'write',
 291         'contextlevel' => CONTEXT_SYSTEM,
 292         'legacy' => array(
 293             'admin' => CAP_ALLOW
 294         )
 295     ),
 296
 297     'moodle/user:viewdetails' => array(
 298
 299         'captype' => 'read',
 300         'contextlevel' => CONTEXT_SYSTEM,
 301         'legacy' => array(
 302             'guest' => CAP_ALLOW,
 303             'student' => CAP_ALLOW,
 304             'teacher' => CAP_ALLOW,
 305             'editingteacher' => CAP_ALLOW,
 306             'admin' => CAP_ALLOW
 307         )
 308     ),
 309
 310     'moodle/user:viewhiddendetails' => array(
 311
 312         'riskbitmask' => RISK_PERSONAL,
 313
 314         'captype' => 'read',
 315         'contextlevel' => CONTEXT_SYSTEM,
 316         'legacy' => array(
 317             'teacher' => CAP_ALLOW,
 318             'editingteacher' => CAP_ALLOW,
 319             'admin' => CAP_ALLOW
 320         )
 321     ),
 322
 323     'moodle/user:loginas' => array(
 324
 325         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS | RISK_CONFIG,
 326
 327         'captype' => 'write',
 328         'contextlevel' => CONTEXT_COURSE,
 329         'legacy' => array(
 330             'admin' => CAP_ALLOW
 331         )
 332     ),
 333
 334     'moodle/role:assign' => array(
 335
 336         'captype' => 'write',
 337         'contextlevel' => CONTEXT_SYSTEM,
 338         'legacy' => array(
 339             'editingteacher' => CAP_ALLOW,
 340             'admin' => CAP_ALLOW
 341         )
 342     ),
 343
 344     'moodle/role:override' => array(
 345
 346         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS,
 347
 348         'captype' => 'write',
 349         'contextlevel' => CONTEXT_SYSTEM,
 350         'legacy' => array(
 351             'admin' => CAP_ALLOW
 352         )
 353     ),
 354
 355     'moodle/role:manage' => array(
 356
 357         'riskbitmask' => RISK_SPAM | RISK_PERSONAL | RISK_XSS,
 358
 359         'captype' => 'write',
 360         'contextlevel' => CONTEXT_SYSTEM,
 361         'legacy' => array(
 362             'admin' => CAP_ALLOW
 363         )
 364     ),
 365
 366     'moodle/role:unassignself' => array(
 367
 368         'captype' => 'write',
 369         'contextlevel' => CONTEXT_SYSTEM,
 370         'legacy' => array(
 371             'student' => (empty($CFG->allowunenrol)) ? CAP_INHERIT : CAP_ALLOW,
 372             'teacher' => CAP_ALLOW,
 373             'editingteacher' => CAP_ALLOW,
 374             'coursecreator' => CAP_ALLOW,
 375             'admin' => CAP_ALLOW
 376         )
 377     ),
 378
 379     'moodle/role:viewhiddenassigns' => array(
 380
 381         'captype' => 'read',
 382         'contextlevel' => CONTEXT_SYSTEM,
 383         'legacy' => array(
 384             'teacher' => CAP_ALLOW,
 385             'editingteacher' => CAP_ALLOW,
 386             'admin' => CAP_ALLOW
 387         )
 388     ),
 389
 390     'moodle/role:switchroles' => array(
 391
 392         'riskbitmask' => RISK_XSS,
 393
 394         'captype' => 'read',
 395         'contextlevel' => CONTEXT_SYSTEM,
 396         'legacy' => array(
 397             'editingteacher' => CAP_ALLOW,
 398             'admin' => CAP_ALLOW
 399         )
 400     ),
 401
 402     'moodle/category:create' => array(
 403
 404         'riskbitmask' => RISK_XSS,
 405
 406         'captype' => 'write',
 407         'contextlevel' => CONTEXT_COURSECAT,
 408         'legacy' => array(
 409             'admin' => CAP_ALLOW
 410         )
 411     ),
 412
 413     'moodle/category:delete' => array(
 414
 415         'captype' => 'write',
 416         'contextlevel' => CONTEXT_COURSECAT,
 417         'legacy' => array(
 418             'admin' => CAP_ALLOW
 419         )
 420     ),
 421
 422     'moodle/category:update' => array(
 423
 424         'riskbitmask' => RISK_XSS,
 425
 426         'captype' => 'write',
 427         'contextlevel' => CONTEXT_COURSECAT,
 428         'legacy' => array(
 429             'admin' => CAP_ALLOW
 430         )
 431     ),
 432
 433     'moodle/category:visibility' => array(
 434
 435         'captype' => 'write',
 436         'contextlevel' => CONTEXT_COURSECAT,
 437         'legacy' => array(
 438             'admin' => CAP_ALLOW
 439         )
 440     ),
 441
 442     'moodle/course:create' => array(
 443
 444         'riskbitmask' => RISK_XSS,
 445
 446         'captype' => 'write',
 447         'contextlevel' => CONTEXT_COURSECAT,
 448         'legacy' => array(
 449             'coursecreator' => CAP_ALLOW,
 450             'admin' => CAP_ALLOW
 451         )
 452     ),
 453
 454     'moodle/course:delete' => array(
 455
 456         'captype' => 'write',
 457         'contextlevel' => CONTEXT_COURSE,
 458         'legacy' => array(
 459             'admin' => CAP_ALLOW
 460         )
 461     ),
 462
 463     'moodle/course:update' => array(
 464
 465         'riskbitmask' => RISK_XSS,
 466
 467         'captype' => 'write',
 468         'contextlevel' => CONTEXT_COURSE,
 469         'legacy' => array(
 470             'editingteacher' => CAP_ALLOW,
 471             'admin' => CAP_ALLOW
 472         )
 473     ),
 474
 475     'moodle/course:view' => array(
 476
 477         'captype' => 'read',
 478         'contextlevel' => CONTEXT_COURSE,
 479         'legacy' => array(
 480             'guest' => CAP_ALLOW,
 481             'student' => CAP_ALLOW,
 482             'teacher' => CAP_ALLOW,
 483             'editingteacher' => CAP_ALLOW
 484         )
 485     ),
 486
 487     'moodle/course:bulkmessaging' => array(
 488
 489         'riskbitmask' => RISK_SPAM,
 490
 491         'captype' => 'write',
 492         'contextlevel' => CONTEXT_COURSE,
 493         'legacy' => array(
 494             'teacher' => CAP_ALLOW,
 495             'editingteacher' => CAP_ALLOW,
 496             'admin' => CAP_ALLOW
 497         )
 498     ),
 499
 500     'moodle/course:viewhiddenuserfields' => array(
 501
 502         'riskbitmask' => RISK_PERSONAL,
 503
 504         'captype' => 'read',
 505         'contextlevel' => CONTEXT_COURSE,
 506         'legacy' => array(
 507             'teacher' => CAP_ALLOW,
 508             'editingteacher' => CAP_ALLOW,
 509             'admin' => CAP_ALLOW
 510         )
 511     ),
 512
 513     'moodle/course:viewhiddencourses' => array(
 514
 515         'captype' => 'read',
 516         'contextlevel' => CONTEXT_COURSE,
 517         'legacy' => array(
 518             'coursecreator' => CAP_ALLOW,
 519             'teacher' => CAP_ALLOW,
 520             'editingteacher' => CAP_ALLOW,
 521             'admin' => CAP_ALLOW
 522         )
 523     ),
 524
 525     'moodle/course:visibility' => array(
 526
 527         'captype' => 'write',
 528         'contextlevel' => CONTEXT_COURSE,
 529         'legacy' => array(
 530             'admin' => CAP_ALLOW
 531         )
 532     ),
 533
 534     'moodle/course:managefiles' => array(
 535
 536         'riskbitmask' => RISK_XSS,
 537
 538         'captype' => 'write',
 539         'contextlevel' => CONTEXT_COURSE,
 540         'legacy' => array(
 541             'editingteacher' => CAP_ALLOW,
 542             'admin' => CAP_ALLOW
 543         )
 544     ),
 545
 546     'moodle/course:manageactivities' => array(
 547
 548         'riskbitmask' => RISK_XSS,
 549
 550         'captype' => 'write',
 551         'contextlevel' => CONTEXT_COURSE,
 552         'legacy' => array(
 553             'editingteacher' => CAP_ALLOW,
 554             'admin' => CAP_ALLOW
 555         )
 556     ),
 557
 558     'moodle/course:managemetacourse' => array(
 559
 560         'captype' => 'write',
 561         'contextlevel' => CONTEXT_COURSE,
 562         'legacy' => array(
 563             'editingteacher' => CAP_ALLOW,
 564             'admin' => CAP_ALLOW
 565         )
 566     ),
 567
 568     'moodle/course:activityvisibility' => array(
 569
 570         'captype' => 'write',
 571         'contextlevel' => CONTEXT_COURSE,
 572         'legacy' => array(
 573             'editingteacher' => CAP_ALLOW,
 574             'admin' => CAP_ALLOW
 575         )
 576     ),
 577
 578     'moodle/course:viewhiddenactivities' => array(
 579
 580         'captype' => 'write',
 581         'contextlevel' => CONTEXT_COURSE,
 582         'legacy' => array(
 583             'teacher' => CAP_ALLOW,
 584             'editingteacher' => CAP_ALLOW,
 585             'admin' => CAP_ALLOW
 586         )
 587     ),
 588
 589     'moodle/course:viewparticipants' => array(
 590
 591         'captype' => 'read',
 592         'contextlevel' => CONTEXT_COURSE,
 593         'legacy' => array(
 594             'student' => CAP_ALLOW,
 595             'teacher' => CAP_ALLOW,
 596             'editingteacher' => CAP_ALLOW,
 597             'admin' => CAP_ALLOW
 598         )
 599     ),
 600
 601     'moodle/course:viewscales' => array(
 602
 603         'captype' => 'read',
 604         'contextlevel' => CONTEXT_COURSE,
 605         'legacy' => array(
 606             'student' => CAP_ALLOW,
 607             'teacher' => CAP_ALLOW,
 608             'editingteacher' => CAP_ALLOW,
 609             'admin' => CAP_ALLOW
 610         )
 611     ),
 612
 613     'moodle/course:managescales' => array(
 614
 615         'captype' => 'write',
 616         'contextlevel' => CONTEXT_COURSE,
 617         'legacy' => array(
 618             'editingteacher' => CAP_ALLOW,
 619             'admin' => CAP_ALLOW
 620         )
 621     ),
 622
 623     'moodle/course:managegroups' => array(
 624
 625         'captype' => 'write',
 626         'contextlevel' => CONTEXT_COURSE,
 627         'legacy' => array(
 628             'editingteacher' => CAP_ALLOW,
 629             'admin' => CAP_ALLOW
 630         )
 631     ),
 632
 633     'moodle/course:reset' => array(
 634
 635         'captype' => 'write',
 636         'contextlevel' => CONTEXT_COURSE,
 637         'legacy' => array(
 638             'editingteacher' => CAP_ALLOW,
 639             'admin' => CAP_ALLOW
 640         )
 641     ),
 642
 643     'moodle/blog:view' => array(
 644
 645         'captype' => 'read',
 646         'contextlevel' => CONTEXT_SYSTEM,
 647         'legacy' => array(
 648             'guest' => CAP_ALLOW,
 649             'user' => CAP_ALLOW,
 650             'student' => CAP_ALLOW,
 651             'teacher' => CAP_ALLOW,
 652             'editingteacher' => CAP_ALLOW,
 653             'admin' => CAP_ALLOW
 654         )
 655     ),
 656
 657     'moodle/blog:create' => array( // works in CONTEXT_SYSTEM only
 658
 659         'riskbitmask' => RISK_SPAM,
 660
 661         'captype' => 'write',
 662         'contextlevel' => CONTEXT_SYSTEM,
 663         'legacy' => array(
 664             'user' => CAP_ALLOW,
 665             'admin' => CAP_ALLOW
 666         )
 667     ),
 668
 669     'moodle/blog:manageofficialtags' => array(
 670
 671         'riskbitmask' => RISK_SPAM,
 672
 673         'captype' => 'write',
 674         'contextlevel' => CONTEXT_SYSTEM,
 675         'legacy' => array(
 676             'admin' => CAP_ALLOW
 677         )
 678     ),
 679
 680     'moodle/blog:managepersonaltags' => array(
 681
 682         'riskbitmask' => RISK_SPAM,
 683
 684         'captype' => 'write',
 685         'contextlevel' => CONTEXT_SYSTEM,
 686         'legacy' => array(
 687             'student' => CAP_ALLOW,
 688             'teacher' => CAP_ALLOW,
 689             'editingteacher' => CAP_ALLOW,
 690             'admin' => CAP_ALLOW
 691         )
 692     ),
 693
 694     'moodle/blog:manageentries' => array(
 695
 696         'riskbitmask' => RISK_SPAM,
 697
 698         'captype' => 'write',
 699         'contextlevel' => CONTEXT_SYSTEM,
 700         'legacy' => array(
 701             'teacher' => CAP_ALLOW,
 702             'editingteacher' => CAP_ALLOW,
 703             'admin' => CAP_ALLOW
 704         )
 705     ),
 706
 707     'moodle/calendar:manageownentries' => array( // works in CONTEXT_SYSTEM only
 708
 709         'riskbitmask' => RISK_SPAM,
 710
 711         'captype' => 'write',
 712         'contextlevel' => CONTEXT_SYSTEM,
 713         'legacy' => array(
 714             'user' => CAP_ALLOW,
 715             'admin' => CAP_ALLOW
 716         )
 717     ),
 718
 719     'moodle/calendar:manageentries' => array(
 720
 721         'riskbitmask' => RISK_SPAM,
 722
 723         'captype' => 'write',
 724         'contextlevel' => CONTEXT_SYSTEM,
 725         'legacy' => array(
 726             'teacher' => CAP_ALLOW,
 727             'editingteacher' => CAP_ALLOW,
 728             'admin' => CAP_ALLOW
 729         )
 730     ),
 731
 732     'moodle/user:editprofile' => array(
 733
 734         'riskbitmask' => RISK_SPAM,
 735
 736         'captype' => 'write',
 737         'contextlevel' => CONTEXT_USER,
 738         'legacy' => array(
 739             'admin' => CAP_ALLOW
 740         )
 741     ),
 742
 743     'moodle/user:editownprofile' => array(
 744
 745         'captype' => 'write',
 746         'contextlevel' => CONTEXT_SYSTEM,
 747         'legacy' => array(
 748             'guest' => CAP_PROHIBIT,
 749             'user' => CAP_ALLOW,
 750             'admin' => CAP_ALLOW
 751         )
 752     ),
 753
 754     'moodle/user:changeownpassword' => array(
 755
 756         'captype' => 'write',
 757         'contextlevel' => CONTEXT_SYSTEM,
 758         'legacy' => array(
 759             'guest' => CAP_PROHIBIT,
 760             'user' => CAP_ALLOW,
 761             'admin' => CAP_ALLOW
 762         )
 763     ),
 764
 765     // The next 3 might make no sense for some roles, e.g teacher, etc.
 766     // since the next level up is site. These are more for the parent role
 767     'moodle/user:readuserposts' => array(
 768
 769         'captype' => 'read',
 770         'contextlevel' => CONTEXT_USER,
 771         'legacy' => array(
 772             'student' => CAP_ALLOW,
 773             'teacher' => CAP_ALLOW,
 774             'editingteacher' => CAP_ALLOW,
 775             'admin' => CAP_ALLOW
 776         )
 777     ),
 778
 779     'moodle/user:readuserblogs' => array(
 780
 781         'captype' => 'read',
 782         'contextlevel' => CONTEXT_USER,
 783         'legacy' => array(
 784             'student' => CAP_ALLOW,
 785             'teacher' => CAP_ALLOW,
 786             'editingteacher' => CAP_ALLOW,
 787             'admin' => CAP_ALLOW
 788         )
 789     ),
 790
 791     'moodle/user:viewuseractivitiesreport' => array(
 792
 793         'captype' => 'read',
 794         'contextlevel' => CONTEXT_USER,
 795         'legacy' => array(
 796             'teacher' => CAP_ALLOW,
 797             'editingteacher' => CAP_ALLOW,
 798             'admin' => CAP_ALLOW
 799         )
 800     ),
 801
 802     'moodle/question:managecategory' => array(
 803
 804         'captype' => 'write',
 805         'contextlevel' => CONTEXT_COURSE,
 806         'legacy' => array(
 807             'editingteacher' => CAP_ALLOW,
 808             'admin' => CAP_ALLOW
 809         )
 810     ),
 811
 812     //new in moodle 1.9
 813     'moodle/question:add' => array(
 814         'riskbitmask' => RISK_SPAM,
 815         'captype' => 'write',
 816         'contextlevel' => CONTEXT_COURSE,
 817         'legacy' => array(
 818             'editingteacher' => CAP_ALLOW,
 819             'admin' => CAP_ALLOW
 820         ),
 821         'clonepermissionsfrom' =>  'moodle/question:manage'
 822     ),
 823     'moodle/question:editmine' => array(
 824         'riskbitmask' => RISK_SPAM,
 825         'captype' => 'write',
 826         'contextlevel' => CONTEXT_COURSE,
 827         'legacy' => array(
 828             'editingteacher' => CAP_ALLOW,
 829             'admin' => CAP_ALLOW
 830         ),
 831         'clonepermissionsfrom' =>  'moodle/question:manage'
 832     ),
 833     'moodle/question:editall' => array(
 834         'riskbitmask' => RISK_SPAM,
 835         'captype' => 'write',
 836         'contextlevel' => CONTEXT_COURSE,
 837         'legacy' => array(
 838             'editingteacher' => CAP_ALLOW,
 839             'admin' => CAP_ALLOW
 840         ),
 841         'clonepermissionsfrom' =>  'moodle/question:manage'
 842     ),
 843     'moodle/question:viewmine' => array(
 844         'captype' => 'read',
 845         'contextlevel' => CONTEXT_COURSE,
 846         'legacy' => array(
 847             'editingteacher' => CAP_ALLOW,
 848             'admin' => CAP_ALLOW
 849         ),
 850         'clonepermissionsfrom' =>  'moodle/question:manage'
 851     ),
 852     'moodle/question:viewall' => array(
 853         'captype' => 'read',
 854         'contextlevel' => CONTEXT_COURSE,
 855         'legacy' => array(
 856             'editingteacher' => CAP_ALLOW,
 857             'admin' => CAP_ALLOW
 858         ),
 859         'clonepermissionsfrom' =>  'moodle/question:manage'
 860     ),
 861     'moodle/question:usemine' => array(
 862         'captype' => 'read',
 863         'contextlevel' => CONTEXT_COURSE,
 864         'legacy' => array(
 865             'editingteacher' => CAP_ALLOW,
 866             'admin' => CAP_ALLOW
 867         ),
 868         'clonepermissionsfrom' =>  'moodle/question:manage'
 869     ),
 870     'moodle/question:useall' => array(
 871         'captype' => 'read',
 872         'contextlevel' => CONTEXT_COURSE,
 873         'legacy' => array(
 874             'editingteacher' => CAP_ALLOW,
 875             'admin' => CAP_ALLOW
 876         ),
 877         'clonepermissionsfrom' =>  'moodle/question:manage'
 878     ),
 879     'moodle/question:movemine' => array(
 880         'captype' => 'write',
 881         'contextlevel' => CONTEXT_COURSE,
 882         'legacy' => array(
 883             'editingteacher' => CAP_ALLOW,
 884             'admin' => CAP_ALLOW
 885         ),
 886         'clonepermissionsfrom' =>  'moodle/question:manage'
 887     ),
 888     'moodle/question:moveall' => array(
 889         'captype' => 'write',
 890         'contextlevel' => CONTEXT_COURSE,
 891         'legacy' => array(
 892             'editingteacher' => CAP_ALLOW,
 893             'admin' => CAP_ALLOW
 894         ),
 895         'clonepermissionsfrom' =>  'moodle/question:manage'
 896     ),
 897     //END new in moodle 1.9
 898
 899     // Configure the installed question types.
 900     'moodle/question:config' => array(
 901
 902         'riskbitmask' => RISK_CONFIG,
 903
 904         'captype' => 'write',
 905         'contextlevel' => CONTEXT_SYSTEM,
 906         'legacy' => array(
 907             'admin' => CAP_ALLOW
 908         )
 909     ),
 910
 911     'moodle/site:doclinks' => array(
 912
 913         'captype' => 'read',
 914         'contextlevel' => CONTEXT_SYSTEM,
 915         'legacy' => array(
 916             'teacher' => CAP_ALLOW,
 917             'editingteacher' => CAP_ALLOW,
 918             'admin' => CAP_ALLOW
 919         )
 920     ),
 921
 922     'moodle/course:sectionvisibility' => array(
 923
 924         'captype' => 'write',
 925         'contextlevel' => CONTEXT_COURSE,
 926         'legacy' => array(
 927             'editingteacher' => CAP_ALLOW,
 928             'admin' => CAP_ALLOW
 929         )
 930     ),
 931
 932     'moodle/course:useremail' => array(
 933
 934         'captype' => 'write',
 935         'contextlevel' => CONTEXT_COURSE,
 936         'legacy' => array(
 937             'editingteacher' => CAP_ALLOW,
 938             'admin' => CAP_ALLOW
 939         )
 940     ),
 941
 942     'moodle/course:viewhiddensections' => array(
 943
 944         'captype' => 'write',
 945         'contextlevel' => CONTEXT_COURSE,
 946         'legacy' => array(
 947             'editingteacher' => CAP_ALLOW,
 948             'admin' => CAP_ALLOW
 949         )
 950     ),
 951
 952     'moodle/course:setcurrentsection' => array(
 953
 954         'captype' => 'write',
 955         'contextlevel' => CONTEXT_COURSE,
 956         'legacy' => array(
 957             'editingteacher' => CAP_ALLOW,
 958             'admin' => CAP_ALLOW
 959         )
 960     ),
 961
 962     'moodle/site:mnetlogintoremote' => array(
 963         'riskbitmask' => RISK_PERSONAL | RISK_XSS,
 964         'captype' => 'read',
 965         'contextlevel' => CONTEXT_SYSTEM,
 966         'legacy' => array(
 967             'admin' => CAP_ALLOW
 968         )
 969     ),
 970
 971     'moodle/grade:viewall' => array(
 972         'riskbitmask' => RISK_PERSONAL,
 973         'captype' => 'read',
 974         'contextlevel' => CONTEXT_COURSE,
 975         'legacy' => array(
 976             'teacher' => CAP_ALLOW,
 977             'editingteacher' => CAP_ALLOW,
 978             'admin' => CAP_ALLOW
 979         ),
 980         'clonepermissionsfrom' => 'moodle/course:viewcoursegrades'
 981     ),
 982
 983     'moodle/grade:view' => array(
 984         'captype' => 'read',
 985         'contextlevel' => CONTEXT_COURSE, // and CONTEXT_PERSONAL too
 986         'legacy' => array(
 987             'student' => CAP_ALLOW
 988         )
 989     ),
 990
 991     'moodle/grade:viewhidden' => array(
 992         'riskbitmask' => RISK_PERSONAL,
 993         'captype' => 'read',
 994         'contextlevel' => CONTEXT_COURSE, // and CONTEXT_PERSONAL too
 995         'legacy' => array(
 996         ),
 997         'clonepermissionsfrom' => 'moodle/course:viewcoursegrades'
 998     ),
 999
1000     'moodle/grade:import' => array(
1001         'riskbitmask' => RISK_PERSONAL,
1002         'captype' => 'write',
1003         'contextlevel' => CONTEXT_COURSE,
1004         'legacy' => array(
1005             'editingteacher' => CAP_ALLOW,
1006             'admin' => CAP_ALLOW
1007         ),
1008         'clonepermissionsfrom' => 'moodle/course:managegrades'
1009     ),
1010
1011     'moodle/grade:export' => array(
1012         'riskbitmask' => RISK_PERSONAL,
1013         'captype' => 'read',
1014         'contextlevel' => CONTEXT_COURSE,
1015         'legacy' => array(
1016             'teacher' => CAP_ALLOW,
1017             'editingteacher' => CAP_ALLOW,
1018             'admin' => CAP_ALLOW
1019         ),
1020         'clonepermissionsfrom' => 'moodle/course:managegrades'
1021     ),
1022
1023     'moodle/grade:manage' => array(
1024         'riskbitmask' => RISK_PERSONAL,
1025         'captype' => 'write',
1026         'contextlevel' => CONTEXT_COURSE,
1027         'legacy' => array(
1028             'editingteacher' => CAP_ALLOW,
1029             'admin' => CAP_ALLOW
1030         ),
1031         'clonepermissionsfrom' => 'moodle/course:managegrades'
1032     ),
1033
1034     'moodle/grade:manageoutcomes' => array(
1035         'riskbitmask' => RISK_PERSONAL,
1036         'captype' => 'write',
1037         'contextlevel' => CONTEXT_COURSE,
1038         'legacy' => array(
1039             'editingteacher' => CAP_ALLOW,
1040             'admin' => CAP_ALLOW
1041         ),
1042         'clonepermissionsfrom' => 'moodle/course:managegrades'
1043     ),
1044
1045     'moodle/grade:hide' => array(
1046         'captype' => 'write',
1047         'contextlevel' => CONTEXT_COURSE,
1048         'legacy' => array(
1049             'editingteacher' => CAP_ALLOW,
1050             'admin' => CAP_ALLOW
1051         )
1052     ),
1053
1054     'moodle/grade:lock' => array(
1055         'captype' => 'write',
1056         'contextlevel' => CONTEXT_COURSE,
1057         'legacy' => array(
1058             'editingteacher' => CAP_ALLOW,
1059             'admin' => CAP_ALLOW
1060         )
1061     ),
1062
1063     'moodle/grade:unlock' => array(
1064         'captype' => 'write',
1065         'contextlevel' => CONTEXT_COURSE,
1066         'legacy' => array(
1067             'editingteacher' => CAP_ALLOW,
1068             'admin' => CAP_ALLOW
1069         )
1070     ),
1071
1072     'moodle/grade:override' => array(
1073         'captype' => 'write',
1074         'contextlevel' => CONTEXT_COURSE,
1075         'legacy' => array(
1076             'editingteacher' => CAP_ALLOW,
1077             'admin' => CAP_ALLOW
1078         )
1079     ),
1080
1081     'moodle/my:manageblocks' => array(
1082         'captype' => 'write',
1083         'contextlevel' => CONTEXT_SYSTEM,
1084         'legacy' => array(
1085             'user' => CAP_ALLOW
1086         )
1087     ),
1088
1089     'moodle/notes:view' => array(
1090         'captype' => 'read',
1091         'contextlevel' => CONTEXT_SYSTEM,
1092         'legacy' => array(
1093             'teacher' => CAP_ALLOW,
1094             'editingteacher' => CAP_ALLOW,
1095             'admin' => CAP_ALLOW
1096         )
1097     ),
1098
1099     'moodle/notes:manage' => array(
1100         'captype' => 'write',
1101         'contextlevel' => CONTEXT_SYSTEM,
1102         'legacy' => array(
1103             'teacher' => CAP_ALLOW,
1104             'editingteacher' => CAP_ALLOW,
1105             'admin' => CAP_ALLOW
1106         )
1107     ),
1108
1109     'moodle/tag:manage' => array(
1110         'captype' => 'write',
1111         'contextlevel' => CONTEXT_SYSTEM,
1112         'legacy' => array(
1113             'teacher' => CAP_ALLOW,
1114             'editingteacher' => CAP_ALLOW,
1115             'admin' => CAP_ALLOW
1116         )
1117     ),
1118
1119     'moodle/tag:create' => array(
1120         'captype' => 'write',
1121         'contextlevel' => CONTEXT_SYSTEM,
1122         'legacy' => array(
1123             'admin' => CAP_ALLOW,
1124             'user' => CAP_ALLOW
1125         )
1126     ),
1127
1128     'moodle/tag:edit' => array(
1129         'captype' => 'write',
1130         'contextlevel' => CONTEXT_SYSTEM,
1131         'legacy' => array(
1132             'admin' => CAP_ALLOW,
1133             'user' => CAP_ALLOW
1134         )
1135     ),
1136
1137     'moodle/tag:editblocks' => array(
1138         'captype' => 'write',
1139         'contextlevel' => CONTEXT_SYSTEM,
1140         'legacy' => array(
1141             'teacher' => CAP_ALLOW,
1142             'editingteacher' => CAP_ALLOW,
1143             'admin' => CAP_ALLOW
1144         )
1145     ),
1146
1147     'moodle/block:view' => array(
1148         'captype' => 'read',
1149         'contextlevel' => CONTEXT_BLOCK,
1150         'legacy' => array(
1151             'guest' => CAP_ALLOW,
1152             'user' => CAP_ALLOW,
1153             'student' => CAP_ALLOW,
1154             'teacher' => CAP_ALLOW,
1155             'editingteacher' => CAP_ALLOW,
1156             'coursecreator' => CAP_ALLOW
1157         )
1158     )
1159 );
1160
1161
1162 ?>