erp5_base: avoid Unauthorized errors when editing person details with cancelled career steps

Base_checkPermission script API is not so nice. With it's name, we would expect it
doing checking on the object on which it is called. Instead we must give a path. This
would need to be improved. Also we will ned to clean proxification
erp5_research_item: add unit tests on report listing tasks total time per person on research items