16650 impossible to unpublicize query by other user even when permission is assigned

[``* `#16650` Impossible to unpublicize query by other user even when permission is assigned``](https://www.openproject.org/work_packages/16560)
It doesn't test that all allowed_actions are called in the policy. For example, when :update and :publicize is given it is sufficient to call :update (although :publicize should be tested too)