fixes permissions on work package context menu

Fixes: https://www.openproject.org/work_packages/8860
nice ruby tricks