[api] Fix LineItem CanCan authorization.

Fixes #2952