[api] permissions to execute a release depend on the release target, but not on the source

Conflicts:
	src/api/test/functional/source_controller_test.rb
[api] fix and test permission handling on release action for projects. checking now the target, not the source