17633 split screen does not work without permission

https://community.openproject.org/work_packages/17633
IMO the authorisation should be placed in it's own method. That encapsulates the responsibilities better. 

This method would then only have to ask e.g.
```authorized_for(workPackage, 'update')```