fix ontology button display permission check

fixes #720

can't test the permission check locally, because i don't have a public writable repository (sandbox) here, but the check is the same as in the controller now.