Refactor isAuthorized()

There are sometimes redundant authz calculations across controllers, particularly where one view hands off to another controller. (eg: co_people/canvas links out to a number of other controllers, but isAuthorized needs to let the view know whether or not to render the "provision" button, etc.)

Move this logic into RoleComponent.