TestHarness servlet should only be accesible to "Super Admin" role

[iperdomo]

The TestHarness servlet is now available to any authenticated user. This servlet contains actions potentially harmful (e.g. deleting data). Therefore it needs to be accesible to Super Admin role.

Steps to reproduce:

• Login with a user that only has USER role and access the test harness URL: http://host/webapp/testharness
• Use the know commands to trigger an action, e.g rebuildQuestionSumaries

Expected result:

• The user should get a 403 access denied page

Current result:

• A user can trigger any action

[mtwestra]

Code reviewed and correct.

[mtwestra]

needs functionality testing

[caetie]

Testing steps:

1. Log in to dashboard as User or Admin
2. Paste testharness into URL field

Expected:
see 403 - Error: Access is denied

Actual:
PASS (testing as User)