LPS-42908 Asset Publisher shows all content when configuring all categories/tags without VIEW permission

These pull had tests but I had to remove them because they are failing due to what seems a bug in the handling of transactions while executing tests. Manu and Juan G. are working on it. See https://github.com/JorgeFerrer/liferay-portal/pull/288 for details.

I've decided to go ahead even without tests because this is a regression and related to security.