The permissions check is not correct (even users with grade capability should not
see user identities) and $assignment->get_renderer() is preferred over $OUTPUT.
This change adds a function to the assign class to allow the permissions for a group submission
to be checked and updates all the submission plugins to call it.