We are experincing difficulties on shooting the problem reported by Security Report. The message is:

Default roles (courses) Critical Incorrectly defined default course roles detected!

and the explanations are:

• Risky capabilities detected in context.
• Risky capabilities detected in context.
• Risky capabilities detected in context.
• Unsupported legacy type detected.

Clicking on "context" where risky capabilities are found, Admins are sent respectively to the role details of Course creator, Student and Teacher. Resetting the default of each role does not solve the Security report Issue

About "Unsupported Legacy type detected", there are no legacy type different from the standard, nor there are clues where the Unsupported legacy type is found