XNAT-3444 Converted permissions check to use XDATUser.hasAccessTo() instead of direct XDAT.canAction() call.