download submission only visible to staff and peer reviewers, fixed missing logic in rendering assignment_submission permissions