Better default permissions for views pages based on file entity admin page

Spun off of recent fixes for the admin_views module version 1.7.

File_entity provides default configuration that is secure however allows a site builder the option to add a page display based on the admin/content/files view it provides with a default that is not secure. If a new views file administration page display is created without specifying new permissions restrictions, an incorrect default permission is saved and the newly created page allows elevated file administration capabilities to anonymous users.

In short, the vast majority of sites using file_entity are probably not exposing a vulnerability unless a site builder/privileged user has created a views page based on the files administration view provided by file_entity.

The new release provides a secure default for optional custom file administration views.
New page defaults are restrictive enough to avoid an accidental site building mistake. The latest module fix includes an automatic fix for previously incorrect custom views pages of this type.

Previous releases of this module did not supply sane page permission defaults for new file administration views page displays.

The vulnerability is mitigated by the fact that only site builders and elevated roles have high enough permissions to create views pages of this type. Also mitigated by the fact that the site builder has to overlook the permissions configuration without configuring a restricted permission or role as would be normally recommended.

WIth that all said, the latest release of this module provides an automatic fix for previously incorrect pages and also provides secure default permissions values for new views page displays.

It is recommended to upgrade to file_entity 7.x-2.27 or 7.x-3.0-beta13 at your earliest convenience.