Allow worker scripts and admins to patch requests.

This fixes the problem with cmsbuild being told "Forbidded" when trying to
change the state of a request from "Pending" to "Running".