Security: Restrict submitter access to their own items

[Janell-Huyck]

Right now, submitter # 2 can see, edit, and destroy works created by submitter # 1 if they just type in the url in the address bar. We need to limit access to publication pages to users who are either admins or the submitter who created those works.