Thumbnails/pages for multipage items displaying as broken images, download options not available

[sarahjeansweeney]

This collection contains a mix of content with two types of restricted access: https://repository.library.northeastern.edu/collections/neu:f1881m49s

27 of the files can be viewed by Northeastern - All. The rest can only be viewed by Library Admin. All files can be managed by DRS staff and Archives staff.

The 27 Northeastern - All files were uploaded a few months ago. Since then, I uploaded 165 files restricted to Library Admin, not Northeastern - All. Before I moved on to uploading the remaining Northeastern - All (there are nearly 1,000 of them), I wanted to make sure the 165 had been restricted correctly. To do that, I impersonated another user without admin privileges to make sure they could only see the original 27 files. They can, but the thumbnails and multipage items appear to be broken and the download option is missing:

Looking at this file as an example https://repository.library.northeastern.edu/files/neu:m043td25x

The core file is restricted to Northeastern - All, DRS, and archives staff:

<access type="read">
<human/>
<machine>
<group>northeastern:drs:all</group>
</machine>
</access>
<access type="edit">
<human/>
<machine>
<person>001112951</person>
<person>000000000</person>
<group>northeastern:drs:repository:staff</group>
<group>northeastern:drs:library:archives</group>
</machine>
</access>

Whereas the zip file is restricted to admin, DRS, and archives staff:

<access type="read">
<human/>
<machine>
<group>northeastern:drs:library:admin</group>
</machine>
</access>
<access type="edit">
<human/>
<machine>
<person>001112951</person>
<group>northeastern:drs:repository:staff</group>
<group>northeastern:drs:library:archives</group>
<person>000000000</person>
</machine>
</access>

When I uploaded this batch, I believe I just switched the collection permissions from the more restrictive Library-Admin permissions to the less restrictive Northeastern - All rather than using the sentinel (which I probably should have done, but I was uploading these as if I was a user without access to the sentinel). Given that, my best guess is that when I changed the permissions selection, the new permissions didn't get applied to the multipage items/thumbnails, just the core files.