Adding perms:{canAnnotate:true} etc to webgateway imageMarshal
Preview panel handles read-only perms