limit quiz and results scopes to current_user access

now managers and reviewers can only see quizzes and completed results for those quizzes they have been assigned to.

app/controllers/admin/result_controller.rb

@@ -11,10 +11,10 @@ module Admin
     def index
       sort_case = "(case when review_status = 0 then '' else name end)"
       sort_with_case = sort_column == 'name' ? sort_case : sort_column
-      @candidates = Candidate.where(completed: true)
-                             .includes(:recruiter)
-                             .order("#{sort_with_case} #{sort_direction}")
-                             .page(params[:page])
+      @candidates = current_user.reviewees.where(completed: true)
+                                .includes(:recruiter)
+                                .order("#{sort_with_case} #{sort_direction}")
+                                .page(params[:page])
     end
 
     def view