After LTI has been activated, teachers are allowed to connect to any external service by submitting moodle-ID, name oder e-mail adress. The submitting of data can not be overlooked.

Corresponding to data security it is necessary to restrict the functions of LTI, possible as follows:

The moodle-administrators build a range of LTI-activities, allow teachers to access, but prohibit any editing.

In this way data security for all activities is under control of the administrators and spare the teachers creating their own services. During the selection of the given LTI-activities teachers are not allowed to edit the link to a certain service to prevent the activation of unauthorized external 'back door' services.