Allocation-client subpage

[DO NOT MERGE] only for review
use `service_permission` for allocation client for service (`from ralph_scrooge.utils.security import service_permission`)