Viewer Site Permissions does not work as I expect

What user roles do your students have at the S install level?
Are you testing this with their account (or account level) or yours?