Minor PBD fixes

* Demo site now included link to dashboard when user has
  dashboard_access permission
* Correct permissions are set for new AJAX product lookup view