Version number is bumped because a new global option is added to the SCORM setting module Set the protectpackagedownloads global SCORM setting to On (enabled) Create a course, enrol one user as student Add a couple of SCORM packages in the course (you can use the SCORM zips in the mod/scorm/tests) As admin, enable "Mobile services": Plugins ► Web Services ► Mobile Create a Token for the student user: Click on Site administration ► Plugins ► Web services ► Manage tokens Next, you can do a CURL REST call simulating a WS client with the student user. You need to replace the wstoken, courseids and the URL of your moodle instance curl 'http://localhost/m/stable_master/webservice/rest/server.php?moodlewsrestformat=json' --data 'courseids%5B0%5D=4&wsfunction=mod_scorm_get_scorms_by_courses&wstoken=ffbe3a3002f235bf9d01fd9369e10b66' | python -m "json.tool" Confirm that: * In the WS response you see the protectpackagedownloads set to true * If you try to download a package using the packageurl (you need to append to that url: ?token=YOUR_TOKEN_HERE) you will get file not found moodle_exception Now, change the protectpackagedownloads global setting to Off Confirm that: * In the WS response you see the protectpackagedownloads set to false * If you try to download a package using the packageurl (you need to append to that url: ?token=YOUR_TOKEN_HERE) you will be able to download the file successfully