#494176 by catch: Less restrictive hook_file_download(), check access on all nodes containing a file before denying access.