On dataset view, cannot open image from thumbnail on a private dataset

[artntek]

Describe the bug
In the dataset view, I cannot open image from thumbnail on a private dataset

To Reproduce
Steps to reproduce the behavior:

1. Create a new dataset, and under "Share", make it private
2. add an attachment (I used a png image)
3. Save the dataset
4. Browse the dataset, and scroll down to the bottom to see the section "Data Table, Image, and Other Data Details"
5. Click on the thumbnail of your attachment

Expected behavior
The image should open up full size

Observed behavior

• I get a dialog saying "The requested content cannot be loaded. Please try again later."
• See attached image that shows this dialog, and also shows the headers for the failed request. Metacat responds with HTTP 401 ("Unauthorized")
• I am able to download the image with no problems, however, if I click on the download button.

Screenshots

I tried this on https://knb-dev.test.dataone.org/, and also on https://test.arcticdata.io - both running metacatui 2.28.0
Desktop (please complete the following information):

• OS: MacOS Sonoma 14.4.1
• Browser chrome version 124.0.6367.62, and safari version 17.4.1

[artntek]

Just to make sure this wasn't something we broke in metacat 3.0.0, I also verified that the same thing happens on https://mn-demo-6.test.dataone.org/metacatui, which is running the metacat 2.19 release. (Note that it's running an old metacatui version: 2.23.0)