Add spec for #14964
Extract WP update details to service object
Fix #14964
Fix WP controller specs
Fix cukes
Give variable a readable name
Merge pull request #1766 from opf/hotfix/14964_user_without_edit_permission_able_to_update_work_package_attributes

[Hotfix] 14964 user without edit permission able to update work package attributes