Fix admin view of private images & set "view own private files" permission

#4411 PR against 3.9 for release now