It should not be possible to share a project with a group that's an ancestor of the group the project is in

Part of https://gitlab.com/gitlab-org/gitlab-ce/issues/2772

We should disallow this, since access flows down anyway.