Albums that users are not allowed to view should not be listed

Steps to reproduce:

  • create a (super)user without memberships
  • create a photoalbum
  • browse to the albums page
  • notice that the album is there (it shouldn't be)
  • click on the album and get a permission error
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information