private site, rights, transfer scripts and building blocks

All,

My institution is using the Vanderbilt Building block and has run into an issue where users are able to access course content for sections they do not have rights. We are restricting rights using the ${IDENTIFIER} wildcard.

My questions

1- does the building block take the place of the transfer script

2- what is the reason that the credentials restrict access based on INSTRUCTOR or STUDENT roles but not based on course enrollment?