Downloading files attached to reviews requires administer cps reviews permission

Problem/Motivation

Non admin users can't view files attached to CPS reviews. This is because cps review basically shuts down all entity access in a way that doesn't make a lot of sense.

Credit goes to Earl Miles.

Testing

Flush caches to ensure module_implements catches the new hook.
Create a site version and a piece of content; attach a file as a review.
Log in or masquerade as a a non-admin user.
Ensure you can click on and download the file.

Proposed resolution

Implement a cps_review file download access alter to ensure that any files attached to cps reviews are downloadable given the right permissions.

Remaining tasks

Review.