Update checkImagePerm to take a user and allow researchers dependent on project access.
Merge getImageOwner and checkImagePerm. Add admin override.