Apply permissions

@noahsark769 can you check this pr? I pass tests locally but I'm failing a bunch on remote. This could be due to me disconnecting the revolvuserprofile signal. 
I feel like we could put this function to use instead of wrapping the url `as_view`. Why not write `deny_to_non_ambassadors` (or like, `allow_only_to_admins`) and put those into the `dispatch` of `AmbassadorDashboardView` and `AdministratorDashboardView`?