Add operator shelf authorization, apply to relevant viewset (bug 1074304).

See the testing spec in the bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1074304#c1

r? @robhudson @ngoke @diox