Further work on applying permissions to the API.

Covered: All Deployment types, images, pose's

Still need to do measurements then move on to collections