WebSearch: safer protection of restricted records

• Records (/record/xxx) belonging to restricted collections are now more fully protected, regardless of primary or secondary collection definitions, by checking if the user is either owner of the record or is authorized to access *all* restricted collections to which the record belongs to.