MDL-43250 Assign: separate groups mode fix

When in separate groups mode, only get graders in a group that is in the course module grouping.
MDL-28488 Assign: Add a new capability that lets teachers mess with student submissions.