Prevent '%{org_title} Plans' Section From Displaying Plans Created by Users From Other Organisations

[aaronskiba]

Fixes #3345 Fixes #3414

Changes proposed in this PR:

• app/controllers/application_controller.rb

  • Add pdf handling in render_respond_to_format_with_error_message
    • render_respond_to_format_with_error_message is called both when rescuing from Pundit::NotAuthorizedError and ActiveRecord::RecordNotFound. The method works properly with .html format, but prior to this change, ActionController::UnknownFormat was thrown for .pdf format.

• Edit scope :organisationally_or_publicly_visible

  • Within this scope, replace Org.org_admin_plans with newly created Org.owned_plans.
    • Org.org_admin_plans would return any plan where plan.org_id = Org.id. In addition, it would return any plan where a user with user.org_id = Org.id had Administrator access on the plan.
    • Org.owned_plans only returns plans where the Creator access for the plan belongs to a user with user.org_id = Org.id

[github-actions[bot]]

</tr>

	1 Error
:no_entry_sign:	Please include a CHANGELOG entry. You can find it at [CHANGELOG.md](https://github.com/DMPRoadmap/roadmap/blob/main/CHANGELOG.md).

Generated by :no_entry_sign: Danger

[aaronskiba]

Closing this for now. More discussion is needed on how to resolve issue #3345.