Steps to reproduce:

• Login as teacher
• Go to your course
• Do the necessary steps to prepare a new H5P content (i.e. create new content in the content bank or create a .h5p file locally)
• Create a new H5P activity (mod_h5pactivity) in the course and add the H5P content
• Open the "H5P" options section within the activity settings
• Check "Allow download" and "Embed button"
• Save the activity

Expected result

• As teacher, I am able to download and embed the content as soon as the checkboxes are checked
• As student, I am not able to download or embed the content even if the checkboxes are checked
• As admin, I am able to control who is able to download or embed the content by adding / removing capabilities to the teacher and student role

Actual result

• As teacher, I am able to download and embed the content as soon as the checkboxes are checked
• As student, I am able to download or embed the content as soon as the checkboxes are checked
• As admin, I am not able to control or restrict in any way who is able to download or embed the content as soon as the checkboxes are checked by the teacher

Evaluation:
mod_hvp has two capabilities mod/hvp:getexport and mod/hvp:getembedcode which do exactly what is requested here. It would be appreciated if these two capabilities could be ported over to mod_h5pactivity.