Hide watchers from api work package response if user not authorized
Hide watchers tab if user isn’t allowed to view watchers…


… currently the permission is derived from whether the API embeds watchers or not. If the user is allowed to view work packages the API response at least contains an empty array.
Merge pull request #1642 from opf/fix/view-watch-list-permission