Login as admin. Go to Site Admin > Users > Policy settings and set a Site policy URL on the policy settings. Go to Site Admin > General > Advanced features and tick the Enable web services configuration. Go to Site Admin > Server > Manage protocols and enable REST protocol on the Manage protocols. Go to Site Admin > Plugins > Manage authentication and enable Web services authentication In the Manage authentication. Create a new user for webtest, and set "Choose an authentication method" to "Web services authentication". Create a new course, and note down the COURSE ID from the URL course front page. Enrol the webtest user on the course. Enrol also another user (for instance, s1). Go to Site Admin > Server > Manage Tokens and create a new token with the following inputs: User: webtest Service: Mobile mobile web service Create another token for user s1 (with the same Service) Note down the TOKEN values Open a private browser window and call the web service using the following URL: WWWROOT/webservice/rest/server.php?wstoken=TOKEN&wsfunction=core_course_get_contents&courseid=COURSE_ID Replace WWWROOT with the config you have and TOKEN and COURSE_ID from the previous activities. Verify when the webtest token is used, it returns the course content owned by the COURSE_ID instead of the 'Site policy not agreed' error message.  Verify when the s1 token is used, the 'Site policy not agreed' error message is displayed.