Improved security handling WRT collections. Fixed security flaw in which users were able to visit /record/123/{files, comments, reviews} even if they were not authorized to the collection to which the record belonged. Enriched authorization WRT restricted documents by letting their submitters to display them even when they're not authorized to the collection. In case of a restricted fulltext document (with bibdocfile new feature), if the user is authorized to download the document, then he/she can regardless of the collection restriction.