Can LTI tools access all data if given permission to the service?

Forum:

Learning Tools Interoperability Public Forum

Can LTI tools access all data if given permission to the service?

Submitted by pc on Tue, 10-Aug-2021 17:50.

In most LTI platforms configuations, you can give a tool permission to access services like Assignment and Grade (column management) or the Names and Role Provisioning services.

If a tool has permission to update line items via the Assignment and Grade Service, does the LTI standard enforce "line of sight" on what line items the tool can update?

For example, can the tool update ANY line item for a context (course), or does the LTI standard indicate that the tool can only update line items that the tool created itself in that context?

Thanks.

A tool can only see their own Assignments

Platforms should only allow an LTI tool to see and modify the Line Items it created, and also only update scores to those Line Items as well.

Submitted by BrackenMosbacker on Wed, 2021-08-11 18:00

The names 1EdTech^® and IMS Global Learning Consortium^®, the 1EdTech logos, Better Learning From Better Learning Technology^®, TrustEd Apps™, 1EdTech TrustEd Apps™, Learning Tools Interoperability^®, LTI^®, IMS LTI^®, IMS Learning Tools Interoperability^®, OneRoster^®, Caliper Analytics^®, Question & Test Interoperability (QTI)^®, QTI^®, Common Cartridge^®, Competencies and Academic Standards Exchange^®, CASE^®, Competencies and Academic Standards Exchange (CASE)^®, Accessible Portable Item Protocol (APIP)^®, AccessForAll^®, Badge Connect^®, Comprehensive Learner Record Standard™, and CLR Standard™ are trademarks of 1EdTech Consortium, Inc. in the United States and/or other countries. All other trademarks and registered trademarks are the properties of their respective owners.

For information on the 1EdTech trademark usage policy, see our trademark policy page.