[Fixes#75448220] Fixes a missed permission check which allows provider admins to create services