Fix/permissions on v2 types controller

https://www.openproject.org/work_packages/16343
Prefer single-quoted strings when you don't need string interpolation or special symbols.