Fix/timelines public permissions

Fixes [`#2999`](https://www.openproject.org/work_packages/2999).