WFS resource: not taken into account by privileges

[jeanpommier]

Describe the bug
A WFS resource is displayed even if Add to map and Download privileges are unchecked

To Reproduce
Steps to reproduce the behavior:

1. Add a WFS resource to a record
2. Uncheck the privileges Add to map and Download
3. Unlog yourself and open the record view as anonymous person
4. See the WFS resource being displayed, with a Download button. The add to map button is grayed but still works (even though adding a WFS layer to the map seems broken)

Expected behavior

• if add to map privilege is unchecked, the add to map button should not be displayed.
• if download privilege is unchecked, the download button should not be displayed.
• if both are unchecked, the WFS layer information should not be displayed at all, as it is for a WMS layer

Screenshots

Public view (not logged in):

Privileges:

Desktop (please complete the following information):

• Browser : Firefox, Chromium
• GeoNetwork Version 4.4.5
• Docker composition

[jeanpommier]

Note: this problem extends to other download and visualization services on GN 4.2.x

[jeanpommier]

Open the XML view of the record, the WFS service is also publicly exposed there (makes sense, but not desirable)