I had a quick look at the code - you may want to check to see if the student role had the capability 'mod/assign:viewgrades' - as that also allows them to view the grades (and submissions) of all other users on the course (without being able to change those grades).
Assignment
prevent students downloading other submissions
This discussion has been locked so you can no longer reply to it.