As admin, enable "Mobile services": Site administration ► Mobile app ► Mobile settings Create two courses: C1 and C2 Create two users: U1 and U2 Enrol U1 into C1 as student Enrol U2 into C1 as teacher Enrol U2 into C2 as teacher Create a Token in the mobile app service for all the users you created. Creato also a token for the site admin account. Click on Site administration ► Plugins ► Web services ► Manage tokens Now, as U2 login into the site, go to course C1 Via the Participants page, open U1 profile and go to the option "Notes" From there, you have to create a Site, Course and Personal note (three in total). Add a custom note so you can distinguish the type of note, for example: "This is a site note" Open the console an execute this new curl request, replacing wstoken with the token of U2, courseid with C1 and the site url with yours. curl 'http://localhost/m/stable_master/webservice/rest/server.php?moodlewsrestformat=json' --data 'wsfunction=core_notes_get_course_notes&courseid= 2 &wstoken= 3af67232a7596ceb658df4db329e5ad6 ' | python -m "json.tool" Check that: You receive all the notes you created and canmanagecoursenotes is set to true while canmanagesystemnotes is set to false Execute the last CURL request but replacing courseid with C2 Check that: You receive only the "Site notes" and canmanagecoursenotes is set to true while canmanagesystemnotes is set to false Execute the last CURL request but replacing courseid with C1 and the wstoken with U1 one Check that: You receive a "nopermissions" error code. Execute the last CURL request but replacing the wstoken with admin one Check that: You receive the site and course notes only (not personal notes) and both canmanagecoursenotes and canmanagesystemnotes are set to true