Permissions checking

[McCrea]

Currently a number of views check that the user is logged in but do not check if the user has permission to see a file before display said file's details. That's probably worth fixing.