We have some fairly large site-wide cohorts, used for enrolling groups of staff members onto courses using the cohort sync method. We do not want individual staff members with the enrol/manual:enrol capability to be able to enrol these cohorts onto modules manually (this should only be for managers).

Currently, teachers cannot use cohort sync, but they can completely circumvent this by using the "Enrol cohort" option within manual enrolments. This is often done erroneously, and is incredibly time consuming to undo. This could also present a security issue, as users are inadvertently giving large cohorts of users teacher access to their courses.

I would have assumed that the moodle/cohort:view would determine whether users can see site wide cohorts on the manual enrolment modal, but it has no effect.

The solutions I can think of are:

1. Implement a site-wide boolean setting within the manual enrolment plugin to completely disable manual enrolment of cohorts.
2. Make use of the moodle/cohort:view capability to determine whether a user can enrol cohorts manually.
3. Introduce a new capability (e.g., moodle/manual:enrolcohort) to determine whether a user can manually enrol a cohort.

Currently, we use a CSS hack to hide the radio button on the modal, however this is by no means the ideal solution.