Okay, it's turns out that the site links do work for filter customer authorization 90% of the time, without any modification to the file or database.

The only case when it does not pay attention to the authorization value is just after a new customer has signed up. I'm not sure why that is though.