Resolve "Role Instructor can access GraphQL API (duplicate)" Closes #876 and inject-issues#158 See merge request inject/frontend!766