Site: Restrict access to other users' workspaces

[supercoolspy]

Needs to be avoided now since an unauthenticated url would be returned in the api
Fixes #984

[codecov]

Codecov Report

❌ Patch coverage is 66.66667% with 1 line in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
dojo_plugin/api/v1/workspace.py	66.66%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!

[ConnorNelson]

Good catch! Can we change it though so that:

1. the user is allowed to get a url
2. a dojo admin is allowed to get a url for another user (e.g. dojo.is_admin rather than is_admin)

And let's do this for all cases. We can later think about a user sharing the actual direct link that goes straight to their workspace.

[supercoolspy]

1. the user is allowed to get a url

Do you mean by setting the user id field to their own user? Otherwise I believe that user_id is only set when you aren't trying to get a url for your account.

[ConnorNelson]

I meant the normal base case (which is already covered).