Restrict artifact relation creation and deletion

Stefano Riverarequested to merge
artifact-relation-permissions into devel

Only read-only permissions were being checked, allowing anonymous users to create and delete relationships between public artifacts.

Pre-requisite for: #523 (closed)

Edited by Stefano Rivera

Merge request reports