SSP-1459 Require either person read or MAP read in MAP read APIs

Now all these MAP read ops are consistent w/r/t permissions. Previously
was a bit erratic b/c some ops were added specifically to support
the Main tool, so only required person read permissions, but there
were other ops that would get you the exact same data but only
required map read. So now we treat those two perms as equivalent.

Still need to have map read to actually see the MAP tool nav link.