fix permission to manage public queries not respected

[``* `#15886` Permission to manage public queries not respected``](http://www.openproject.org/work_packages/15886)
@ulferts ok, then I will add a check to the popup (to hide/disable the star/unstar checkbox if the start permission is missing, and the same for publicize)