Create four lesson activities. One with the default settings, another one with the default settings but not visible, another one password protected, another one with a time restriction (lesson that starts in a month for example) Enable "Mobile services": Plugins ► Web Services ► Mobile Create a Token for one teacher and one student enrolled in the course: Click on Site administration ► Plugins ► Web services ► Manage tokens Next, you can do a couple of CURL REST call simulating a WS client with the teacher and the student user . You need to replace the wstoken, courseid and the URL of your moodle instance curl 'http://localhost/m/stable_master/webservice/rest/server.php?moodlewsrestformat=json' --data 'courseids%5B0%5D=17&wsfunction=mod_lesson_get_lessons_by_courses&wstoken=12a2a65aeea2a177055e233f9e303218&moodlewssettingfilter=true' | python -m "json.tool" Note, you can use jsonlint.com to validate and format the json returned string or append "| python -m json.tool" to automatically format the command output Confirm that As student you don't see the non-visible lesson but you see the other three; the password protected and the one with the time restrictions will return only the basic information like id, course module, course and name As a teacher you see all the lessons including extra information like the password field