Permissions for incident info and it's status history.

Administrators are allowed to view everything.
Users can see only objects they own.
Permission for status change.

Tests must be refactored.