[#33917] Direct URL asscess of a menu item bypasses Viewing Permissions

See http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=33917&start=0 and old PR https://github.com/joomla/joomla-cms/pull/3957/files by Ilie Pandia

Supersedes gh-3957