Don't fetch the course just to find out if the user has access to it.

@cpennington @sarina same pr but w/o pulling other changes in. To not fetch course just to see if the user has staff or instructor access and to clean up some signatures which had unnecessary args.