respect field level security as possible with dexterity in download view.

see plone/plone.app.dexterity#131