check privileges for listing unpublished artifacts without throwing an
exception on failure (fixes the issue where a user with no Roles cannot
list projects).