KRACOEUS-7856: Added permission logic so that only specific users may ac...

...cess the Key Personnel Certification questionnaire.
@jamey-rsmart please remove that isAggregator check. I know the specs mention that the aggregator needs to be able to perform this action BUT, we should never tie ourselves to roles, only to permissions. In this case, we can always assign the relevant permission to the aggregator role and this should work.