Prevent unauthorized users to view DTP/DUP/People pages and edit manager/other orgs objects

[cudillal]

Currently, you can view/edit any object so long as you have the correct URL. Authorization checks should be added to prevent this.