Restrict visible pubs, stages, and pages based on membership

[gabestein]

Motivation

So users only see pubs and stages they are members of.

Requirements

Modify queries so that:

• In All Pubs, non-community-level-editor users can only see Pubs they have been added to directly, via groups, or via stage membership
• In Workflows, non-community-level-editor users can only see stages they have been added to directly or via groups. If a user has not been added to any workflows, the page should not appear.
• In Pub pages, non-community-level-editor users cannot access Pub pages they do not have access to either through Pub or Stage membership
• Community-level admins and editors can always access all pubs and stages

Modify pages so that:

• Non-community-level admins cannot see or, via API or otherwise, access:
  • Stage Editor
  • Types
  • Fields
  • Forms
  • Integrations
  • Members
  • Settings

Acceptance Criteria