Private Record and Shared Record

How can I achieve 2 below goals with the SECURITY MODULE of Scriptcase:

  1. I need any user to be assigned to a certain group, for an argument sake call it ‘Students’ and ‘Instructors’

  2. A user should be able to see all records from unrestricted table i.e. List of Courses, List of Instructors

  3. A Student should be able to register a new course picking an Instructor and Course - and he should be able to see ONLY HIS OWN RECORDS

  4. Instructor should see all courses “assigned to him” and only to him (also edit assigned courses)

Is it even possible or I am aiming high and wide?