Quick fix for #765 - ACL checks in the media manager ajax calls

This should be superseded by a proper rewrite of the media manager code
Merge pull request #766 from splitbrain/media_acl_fix

Quick fix for #765 - ACL checks in the media manager ajax calls