Event enrollments bulk operations should not be visible to users that don't have the correct permissions

Problem/Motivation

Currently when a LU visits an event page and switch to the 'Enrollments' tab, they can see the VBO operations block and can execute VBO operations on users that enrolled, they never complete due to missing access (the batch goes into a loop).

Steps to reproduce

1. Create an event
2. Log in as a authenticated user
3. Go to the event and the enrollments tab.
4. See the VBO operations block, with the ability to delete and email enrollees.

Proposed resolution

We need to remove all VBO actions that the current user does not have access to perform. If there is no actions to perform, then we should hide the VBO block and only show the list of users that enrolled to the event.

Remaining tasks

/

User interface changes

/

API changes

/

Data model changes

/