allow anyone to view grant apps. hide fiscal letter & site visit report unless permission indicates. closes #545
more url / missing