Fix!: show data to intended users

Restricts access to private lesson files, sanitizes saved rich-text content, and restricts evaluation access so evaluators only work with assignments they are actually assigned to.