Deprecate use of per-media credentials

[Alan Noble]

Currently, access to media (i.e., video and audio) utilizes per-media credentials that are independent of site credentials. This was originally done with the intent of being able to share media with users without the need to grant the site access. The advent of public sites now provides a simpler, more intuitive way of achieving this (and one that is consistent with other data types).

It is proposed that per-media credentials be deprecated and that access to media instead rely on access to the associated site. In summary:

• For private sites, users with read access (or higher) can read media.
• For public sites, all users can read media.

This of course means that sites will need to be public before read access can be granted to arbitrary users.

‌

[David Sutton]

As a side note, this previous implementation of media would allow any user, even without site access to give them self access to any media using the 0 tag in media. They still however would not have the site key for search. It would however give them admin privileges to the media.

[Alan Noble]

Resolved in https://bitbucket.org/ausocean/vidgrind/commits/9e70d7ab215a08289c809ba9841950ef5f82675d