Permission control on collections
I thought this was there but I can't find it anywhere in the current build. Even when the user has admin rights to the collection, I don't see a lock button or permissions menu item.

diff --git a/girder/api/v1/collection.py b/girder/api/v1/collection.py
index 54eb2b027..0c6c3cbcb 100644
--- a/girder/api/v1/collection.py
+++ b/girder/api/v1/collection.py
@@ -88,7 +88,7 @@ class Collection(Resource):
 
     @loadmodel(map={'id': 'coll'}, model='collection', level=AccessType.READ)
     def getCollection(self, coll, params):
-        return self.model('collection').filter(coll)
+        return self.model('collection').filter(coll, self.getCurrentUser())
     getCollection.description = (
         Description('Get a collection by ID.')
         .responseClass('Collection')
diff --git a/tests/cases/collection_test.py b/tests/cases/collection_test.py
index 8a4c8d5c2..987844e57 100644
--- a/tests/cases/collection_test.py
+++ b/tests/cases/collection_test.py
@@ -111,6 +111,12 @@ class CollectionTestCase(base.TestCase):
         self.assertEqual(resp.json[0]['_id'], newCollId)
         self.assertEqual(resp.json[0]['name'], 'New collection')
 
+        # Test collection get
+        resp = self.request(path='/collection/{}'.format(newCollId),
+                            user=self.admin)
+        self.assertStatusOk(resp)
+        self.assertEqual(resp.json['_accessLevel'], AccessType.ADMIN)
+
     def testDeleteCollection(self):
         # Requesting with no path should fail
         resp = self.request(path='/collection', method='DELETE',
['tests/cases/collection_test.py', 'girder/api/v1/collection.py']