Restrict views of attendance to modules where permission is granted

[mcflyhalf]

With the use of query strings in the URL, people now have access via the frontend to modules where they may not have access. Ensure to check that only correct access rights are granted