Skip ACL check for rendering widget

Assuming that when somebody shares the widget, he wants it publicly
accessible.

Also the widget does not leak much information, so privacy wise this
does not seem to be dangerous as well.
Signed-off-by: Michal Čihař <michal@cihar.com>

weblate/trans/views/widgets.py

@@ -118,7 +118,8 @@ def widgets(request, project):
 @cache_page(3600)
 def render_widget(request, project, widget='287x66', color=None, lang=None,
                   extension='png'):
-    obj = get_project(request, project)
+    # We intentionally skip ACL here to allow widget sharing
+    obj = get_project(request, project, skip_acl=True)
 
     # Handle language parameter
     if lang is not None: