Issue #2826485 by mglaman: Product::getDefaultVariation does not check if user has access to variation (#599)