If a user can view a site, then they can view media associated with that site.
For now if a user has the "ADD_IMAGE" permission they can create media.
I'm pretty keen for us to decide on the correct permissions for media (not just images) and when we get the chance to write some better tests to check it's all working as intended.
I'm pretty keen for us to decide on the correct permissions for media (not just images) and when we get the chance to write some better tests to check it's all working as intended.