Restore non-client/vendor access to other users' profiles

[NicoPennec]

Problem

• The Person page is gated by an over-restrictive rule that filters supervisors
  by department and locks out plain artists.

Solution

• Rewrite isCurrentUserAllowed as an exclusion rule: self-access plus anyone
  who is not a client or vendor.