[api] fix decline of add_role, set_bugowner and delete requests when permissions are just defined in package, but not project (bnc#833616).