PIMS-1625: Parcel and Building view details agency authorization

[LawrenceLau2020]

🎯 Summary

PIMS-1625: - Parcel and Building view details agency authorization

Adding authorization checks to prevent a user from viewing a parcel or a building not belonging to their agency.
To test you can try as a "General user" by editing the url and changing the id of the parcel or building to one that has an agency which doesn't belong to your user's agency.

🔰 Checklist

• I have read and agree with the following checklist and am following the guidelines in our Code of Conduct document.

• I have performed a self-review of my code.
• I have commented my code, particularly in hard-to-understand areas.
• I have made corresponding changes to the documentation where required.
• I have tested my changes to the best of my ability.
• My changes generate no new warnings.

[github-actions]

🚀 Deployment Information

The Express API Image has been built with the tag: 2353. Please make sure to utilize this specific tag when promoting these changes to the TEST and PROD environments during the API deployment. For more updates please monitor Image Tags Page on Wiki.

[codeclimate]

Code Climate has analyzed commit d1da9cc and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 75.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 95.6%.

View more on Code Climate.

[dbarkowsky]

Right now, it seems like this isn't checking if I'm an admin or auditor. I should be able to see properties based on that.
Isn't this why we made the checkUserAgencyPermission function under /utilities?

[LawrenceLau2020]

checkUserAgencyPermission

Good catch! I'll refactor these 2 gets to use that function.

[dbarkowsky]

Seems to be working for me.
Prevented me from retrieving details of a parcel that wasn't under my agency.