diff --git a/lib/db/access.php b/lib/db/access.php
index 0dbb72aabf8..46164d5276b 100644
--- a/lib/db/access.php
+++ b/lib/db/access.php
@@ -1123,6 +1123,7 @@ $capabilities = array(
     ),
 
     'moodle/course:managegroups' => array(
+        'riskbitmask' => RISK_XSS,
 
         'captype' => 'write',
         'contextlevel' => CONTEXT_COURSE,
diff --git a/version.php b/version.php
index 498a8ccfdc2..9528f9ca423 100644
--- a/version.php
+++ b/version.php
@@ -29,7 +29,7 @@
 
 defined('MOODLE_INTERNAL') || die();
 
-$version  = 2018122000.01;              // YYYYMMDD      = weekly release date of this DEV branch.
+$version  = 2018122000.02;              // YYYYMMDD      = weekly release date of this DEV branch.
                                         //         RR    = release increments - 00 in DEV branches.
                                         //           .XX = incremental changes.