Added PermissionFilterAttribute to prevent students and assessors from accessing routes and enrollments that they are not allowed to access