As admin, enable "Mobile services": Enable “Web services for mobile devices” on Site administration ► Advanced features Create a Token for the User administrator via Site administration ► Plugins ► Web services ► Manage tokens Obtain Course section Create 2 courses or navigate to existing courses Enter a course and click in a section. Save the sectionid value you see at the URL, like MOODLE_URL/course/section.php?id=$sectionid Repeat this for different sections in diferent courses. Next, make CURL REST call simulating a WS client with the administrator user. You need to replace the $wstoken, the $sectionid and the MOODLE_URL: curl 'MOODLE_URL/webservice/rest/server.php?moodlewsrestformat=json' --data 'wsfunction=core_course_get_courses_by_field&wstoken=$wstoken&field=sectionid&value=$sectionid' --compressed Run the CURL and confirm that You receive the course information Now, run the CURL command with an invalid $sectionid. Confirm that You will not receive the course information