[pg] viewer of admin set cannot view private works

[rjkati]

Descriptive summary

On nurax-pg, a viewer of an admin set cannot view private works. Nurax-dev does not exhibit this behavior

Expected behavior

Viewers of an admin set should be able to view private works deposited to that admin set

Actual behavior

Viewers of an admin set receive an "Unauthorized: the page you have tried to access is private" message when attempting to access a private work within that admin set.

Steps to reproduce the behavior

Prereq: make sure that you have assigned an account as a viewer to an admin set (Viewer). Also, make sure that you have a second account to deposit works (Depositor).

1. As the Depositor account, log in and deposit a private work. On the Relationships tab, select the admin set that the Viewer account can view.
2. Copy a link to the private deposited work
3. In a separate browser, log in as the Viewer user.
4. Paste the URL for the private deposited work into the browser.
5. Observe message ""Unauthorized: the page you have tried to access is private" while you are logged in as the Viewer user.