fix(authsome-mode): deny manuscript access from link for reviewers too

packages/xpub-faraday/config/authsome-mode.js

@@ -81,6 +81,11 @@ async function applyAuthenticatedUserPolicy(user, operation, object, context) {
     }
 
     if (get(object, 'type') === 'collection') {
+      if (
+        !filterDraftCollections(object) ||
+        !filterTechnicalChecksCollections(object)
+      )
+        return false
       return {
         filter: async collection => {
           const userPermissions = await helpers.getUserPermissions({