[frontend] Extend permission check for requests with projects with link

When a source project links to another project and the request is using
the sourceupdate option, we have to ensure that the requester has
permissions to change the linked project.

Kudos goes to @marcus-h (Marcus Hüwe) for finding this ugly bug.

Co-authored-by: David Kang <dkang@suse.com>