Don’t send emails to every registered user

News emails are sent to every registered user even when sent from a
given project, that is because get_matching_permissions() falls back to
checking the permission of user “default” when the given user has no
explicit permissions for that directory, but this is not desired here.

Fixes bug 3021.