Currently we assume all students are users, which is wrong, there has to be an admin role with admin permissions, such as the submit all button