restrict managers to only view applications assigned to them