[SECURITY] Hide items in page tree a user does not have access to

Due to a pass-by-reference error pages a user does not have access
to were still visible in the page tree.

Resolves: #87676
Releases: master, 9.5
Security-Commit: 5d2c69c00554ec64ea020ec803f593ae772fa367
Security-Bulletin: TYPO3-CORE-SA-2019-009
Change-Id: Ic8ba91b596e1589860bc28b746e551ac6bc47588
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/60701


Tested-by: Oliver Hader <oliver.hader@typo3.org>
Reviewed-by: Oliver Hader <oliver.hader@typo3.org>