[#82966592] Clean up figures controllers and policies

In order to modify figures, they must only be permitted to view the paper that the figure belongs to.
Woops I thought I deleted it. I'll remove it.