Respect Trac permissions

[Ryan J Ollos]

I have a group setup with only the following permissions: TICKET_APPEND, TICKET_CREATE, TICKET_EDIT_CC, TICKET_MODIFY,TICKET_VIEW, TICKET_VIEW_SELF. TICKET_VIEW_SELF is provided by the PrivateTicketsPlugin.

Users in this group can still navigate to /pdashboard. They can see:

• Ticket Summary (which should require at least TICKET_VIEW privilege, however it still displays even if I revoke TICKET_VIEW for this group)
• Milestone summary (which should require MILESTONE_VIEW permissions).

Repository statistics renders as a blank graph (which makes me wonder which permissions are required for the graph to render; i did some testing, but couldn't figure this out).

Selecting Show Project Metrics results in ROADMAP_VIEW privileges are required to perform this operation, which is the desired behavior.