@BigWheel This issue also rears its head when you view a movie that is in a collection to which a user does not have access. Follow me on this:
Setup:
Collection 1 has the label excluded
Movie 1 is a part of Collection 1
Movie 1 does not have the excluded label
User 1 has the label excluded added to their exclude option in restrictions section of the Manage Library Access screen.
Methodology:
User 1 cannot see Collection 1 in the collection list as expected
User 1 can view the entry for Movie 1 in the movie library as expected
User 1 clicks on Movie 1 and then can see Collection 1 listed at the bottom of the page even though they should not have access to it.
User 1 can click the header Collection 1 and view the rest of the movies that are in this collection, even though that should not have access.
What should happen:
When User 1 browses to Movie 1 they should be able to see it in the movie library and open the movie and read the metadata and watch it. They should not see Collection 1 at the bottom of the page. Nor should they be able to browse said collection if they somehow got to the collection page.
Again User 1 should have access to all movies, but should not have access to Collection 1. It looks like this might be a systemic issue when it comes to how privacy/security is handled when it comes to the exclude tags and not just the pinned items.
