Fix EZP-22775: [API] Permissions should handle missing limitations gracefully

Some limitations are not implemented yet (like NewState), others that
are only relevant for legacy newer will be (ezjscore ajax call related).
So Permission checks should handle this and make sure that missing
limitation is threated as a "no access" instead of letting the exception
true.

- [ ] todo: Integration/ unit test
Test EZP-22775: Add unit test coverage for exception handling
Merge pull request #851 from ezsystems/ezp-22775

[API] Permissions should handle missing limitations gracefully