Adding authorization for results and users api

[johnugeorge]

Added authorisation checks for results and users api

[github-actions]

MLCommons CLA bot All contributors have signed the MLCommons CLA ✍️ ✅

[aristizabal95]

Permissions look good. I had a doubt regarding the users GET views. Swagger shows that responses include password, but it is not included (thankfully) as part of the response. Do you know why the discrepancy there?

[johnugeorge]

@aristizabal95 password field is write only and hence it won't be retrieved on any read.
https://github.com/mlcommons/medperf/blob/main/server/user/serializers.py#L12

Regarding swagger views, it looks like swagger package has the limitation - axnsan12/drf-yasg#70
Related: https://stackoverflow.com/questions/51285717/drf-write-only-true-displays-in-response-schema

We can work with another swagger generator in the future - https://github.com/tfranzel/drf-spectacular