Eugenia Grieff authored Nov 01, 2023 and Nicolas Dular committed Nov 01, 2023

This is a follow-up to where we updated permissions to set the parent of
an epic at the service level.

This MR covers the permissions in API::EpicLinks so that a user that can
set an epic as parent if they can read this epic (previously we required
having the Guest role in this epic's group). The requirement for the
child epic remains the same, Guest role in this epic's group. 
This update also applies to removing the parent.