Use $_product object instead of undefined $product_id for downloadable p...

...ermissions. Fixes #4095