OZP-10: filter out widgets that person doesn't have access to

- rename model attrs