3.9.11, 3.10.8, 3.11.4, 4.1
MOODLE_310_STABLE, MOODLE_311_STABLE, MOODLE_39_STABLE, MOODLE_401_STABLE
It's been found that users with Student role can view their grades even if mod/assign:viewgrades is set to Prohibit.
Steps to replicate the issue:
- Create a course and a user.
- Enrol the user to the course with Student role.
- Create an assignment acitivity.
- Login as student and submit a submission.
- Login as teacher/admin and grade the submission.
- Edit Student role and set mod/assign:viewgrades capability to Prohibit.
- Login as student and access the activity.
- Confirm, that Feedback section is visible and student can view their grade.