[#82966592] Clean up figures controllers and policies

In order to modify figures, they must only be permitted to view the paper that the figure belongs to.