Security rights set in Core should reflect all parts of onRecord as well.
Currently with the new build out employees filtered by school for grading manager can see any schools gpa's and test scores. I"m not sure the point of the filter if lists and the progress view can still see that information.