Download & Forward icons must show “not allowed” when access is blocked

**Description:**
When access is:

* DENIED
* REVOKED
* EXPIRED

User cannot download or forward. Icons must reflect this regardless of `allowDownload` / `allowForward`.

**Expected Behavior:**

* Force "not allowed" icons when access is blocked
* Only respect `allowDownload` / `allowForward` when status is ACTIVE