use try to access full name like everywhere else
fixes XSS related to bootstrap popover in recent changes
keep submitters out of management namespace even if they are allowed to
access the resource itself