Hide review and voting buttons if user is not able to do so

Moved some business logic regarding reviews from the views to the model.