cubicweb #4854359 missing permissions check when adding an entity without specifying any attributes [validation pending]

http://hg.logilab.org/master/cubicweb/rev/7099bbd685aa removed the permissions check for entity insertion with no edited attributes.

Bug reported by Christophe de Vienne, fix courtesy of Aurelien Campeas.

priorityimportant
typebug
done in3.18.8
load1.000
load left0.000
closed by#85cbf16fbb57 [security] Test case and fix for an INSERT security hole
patch[security] Test case and fix for an INSERT security hole [applied]