Refactoring the permission checking in the datamanager handler to be more DRY
Using the correct permission key for read rights on objects in the datamanager

[skip ci]