Allow admin to see private images and set "view own private files" permission

#4084
#4411 PR against 3.9 for release now