• code - new much shorter patch attached, only minimal relevant changes in code; code is fully tested and working fine for me
• gui is the same
• documentation & training- now disabled by default in patch; would be much easier if we fix MDL-7859

If I would be a "normal" Moodle user, I Think I'll found quite frustrating to go to the module->update page to configure somethings about the module and then, go to the roles/caps page of the module to adjust others.

So I would propose to have ALL the settings in the module page, no matter if they are going to be module settings or capability settings.

Then, both add and update will perform the required tasks, either in the module or in capabilities. I really think we should follow this behaviour. It will allow teachers to ignore all the underlying structure and will make things consistent, instead of having to know WHERE is every setting and what it means.

Ciao

1/ the safe overrides now share the same configuration matrix with normal overrides + improved description text above
2/ added safe override notice explaining the locked caps - bellow the capabilities table
3/ improved performance for both assignable and overridable roles

Two questions about the admin setup side of it though:

1) Query: If you have override and safeoverride is it exactly the same as having override alone? I assume so.

2) Minor Gui thing: The override and safeoverride are not next to each in the list (sort order?)

3) Major GUI thing: The mix of the matrix and the two override caps is a bit confusing ... since the matrix is there as protection can we not just make at least safeoverride as ALLOW by default for all roles? Then we can be more explicit on the matrix screen about what to do if you want to allow people to override unsafe things. Or perhaps better, can we allow setting of the override/safeoverride cap from the matrix screen (checkboxes under role name on left)?

Expected commit day is Wednesday