SOAP API: proper access checks when deleting bugnotes
Affects 0013656 : Reporters have read/write access to existing data of other users