In the manual, under "Access control inheritance", it says: "Note that collections are not considered parents of the photos they contain, therefore, collection membership has no effect on how access control is evaluated for the individual photos. Photos inherit their access control only...