16650 impossible to unpublicize query by other user even when permission is assigned

[``* `#16650` Impossible to unpublicize query by other user even when permission is assigned``](https://www.openproject.org/work_packages/16560)
maybe add a comment, that this `valid_params` is equal to the query params. Also: can't you use an empty params so that nothing gets changed?