work in pending review status displays to non-logged in user in sirenia

[rjkati]

Descriptive summary

When I deposit a work to an admin set with a one-step mediated deposit workflow in sirenia, the work displays to a non-logged in user even though it is still pending review

Steps to reproduce the behavior in User Interface (UI)

1. As a non-admin user go to Dashboard -> Works -> Add New Work
2. Fill out the required fields and add a file
3. In the Relationships tab, choose an admin set with a one-step mediated deposit workflow
4. In the Visibility menu, choose Public visibility
5. Click Save
6. Log out or view the deposited work in an incognito/private window. Observe that you can view the work even though it is pending review.