Fix EZP-20955: [API] Issues with create permission with Section limitation

Adds integration test for this issue and then fixes the issue: section not being set before permission check and not based on parent location.