Default group required

* adds access checks depending on the current group confgiguration of a user
* removes buttons for adding/editing or removing data if default group is not set for a user
* removes buttons for adding/removing related data in unshared interventions
* removes shared-user setting from share menu of an intervention if user is not zb or ets
* renames has_access() from intervention Model into is_shared_with() for more clarity
* fixes bug in group check in_group() from utils.py

compensation/views.py

@@ -42,12 +42,14 @@ def index_view(request: HttpRequest):
 
 
 @login_required
+@default_group_required
 def new_view(request: HttpRequest):
     # ToDo
     pass
 
 
 @login_required
+@default_group_required
 def edit_view(request: HttpRequest, id: str):
     # ToDo
     pass
@@ -106,12 +108,14 @@ def account_index_view(request: HttpRequest):
 
 
 @login_required
+@default_group_required
 def account_new_view(request: HttpRequest):
     # ToDo
     pass
 
 
 @login_required
+@default_group_required
 def account_edit_view(request: HttpRequest, id: str):
     # ToDo
     pass
@@ -130,6 +134,7 @@ def account_remove_view(request: HttpRequest, id: str):
 
 
 @login_required
+@default_group_required
 def new_payment_view(request: HttpRequest, intervention_id: str):
     """ Renders a modal view for adding new payments
 
@@ -168,6 +173,7 @@ def new_payment_view(request: HttpRequest, intervention_id: str):
 
 
 @login_required
+@default_group_required
 def payment_remove_view(request: HttpRequest, id: str):
     """ Renders a modal view for removing payments
 
@@ -187,6 +193,7 @@ def payment_remove_view(request: HttpRequest, id: str):
 
 
 @login_required
+@default_group_required
 def withdraw_remove_view(request: HttpRequest, id: str, withdraw_id: str):
     """ Renders a modal view for removing withdraws