Allow admins to see all scan results; improved permission in scans to decorator.

Since the utlimate admin has permission to look at the database record anyway, admins normally should have power to look at all results. This privacy changes might be revoked later if we introduce tigher auth control.