Staff and superusers can access sources regardless of permissions or published status