Removes alerts for missing permissions.

Fixes [`#3061`](https://www.openproject.org/work_packages/3061).

These appear to not be thought through w/ anonymous users. Those have
little rights, and can see no timeline w/o reportings rights. This
leaves the X-Reason header in the server side, since I'm not sure that
there isn't an API client depending on it.