Insufficient capability checks made it possible for teachers to download users outside of their courses.