Users can see author information block without administer node privilege

When creating a new node, a user without the administer node privilege can still see and set author information.

This was introduced in commit dcb096823b8aa001214d7ec32e3362445aca76b6 [1] for #1804402: Core fieldsets unavailable after adding steps to nodeform. When we check if the core fieldsets belong to this step we set access to true even if the user doesn't have access to them.

I suggest handling the core fieldsets in the same manner as the other fields and just firing a continue; earlier in the loop. I'll attach a patch in the first reply for this.

[1] http://drupalcode.org/project/msnf.git/commit/dcb0968