cubicweb-mercurial-server #3102517 permissions on hosted_by relation should follow that of Repository [validation pending]

Currently one can update/delete the hosted_by relation without having update/delete permission on the subject Repository.

prioritynormal
typebug
done in0.4.0
load1.000
load left0.000
closed by#d4a7e952e7a2 [schema] fix several permissions problems
patchRestrict add/delete permissions of hosted_by relation to that of Repository [applied]