Only show UI controls user has access to according to ACLs

[jrtcppv]

In Tator 1.4, memberships and affiliations may be replaced by fine grain permissions. Currently the UI correctly hides controls that are unavailable to the user via their role defined by memberships, however this is not the case for fine grained permissions. The UI should be updated to hide or label controls based on permissions returned after implementation of #1900.

[bctcvai]

This issue requires #1900 to be completed first

[bctcvai]

This one may benefit from a REST endpoint that lets the UI know if fine-grain permissions are enabled or not.