Fixes #483 - also adds permission control logic to the show files action.
Merge pull request #486 from NEU-Libraries/permissions_on_employees

Fixes #483