avoid item access when item.collection.public_acccess is none

diff --git a/telemeta/web/base.py b/telemeta/web/base.py
index 2c4219a39a084b1cadef35e0fc3badf53f3e3c64..0452d24b469df0fe47cda096cc7cc763ebcd2f5e 100644 (file)
--- a/telemeta/web/base.py
+++ b/telemeta/web/base.py
@@ -256,7 +256,7 @@ class WebView(object):
         else:
             item = MediaItem.objects.get(public_id=public_id)
         
-        if item.public_access == 'none' and not request.user.is_staff:
+        if (item.public_access == 'none' or item.collection.public_access == 'none') and not request.user.is_staff:
             return HttpResponseRedirect('not_allowed/')
             
         # Get TimeSide processors