[Hotfix] 14964 user without edit permission able to update work package attributes

[``* `#14964 User without edit permission able to update work package attributes``](https://www.openproject.org/work_packages/14964)

:exclamation: Consider #1760 too