Restrict access to danse_user_notifications view

I've provided an implementation for this by moving the access control from the SubscriberForm into the service class and then using that as an access control views plugin as well.

Note, you have to run the update script so that the views access control gets updated.

Fixing status.

Thanks for this. I was going to try to work on it this week but from the looks of it I don't think I would have gotten very far. It applies cleanly to DANSE v2.3.5 and with the update and a cache rebuild (maybe not needed?) it works. I'll leave it at "needs review" in case somebody else is watching.

Thanks @rclemings for testing this. Yes, it turned out to be a bit more complex than I thought because we can't define the access control of a view in the routing file as the view itself overrides that. Therefore, I had to provide a view access plugin.

Happy to merge this as it is unlikely that anyone else came along in the foreseeable future.

Automatically closed - issue fixed for 2 weeks with no activity.