fixed access permissions on personal campaign donor list page