Issue #3017935 by chr.fritsch, Wim Leers, alexpott, phenaproxima: Media items should not be available at /media/{id} to users with 'view media' permission by default