Factor permission check in issuable finder

This reimplements abilities logic.

DRYed it up.

Tests will fail before the following dependency is met:

- [ ] https://github.com/gitlabhq/gitlabhq/pull/8091