Factor permission check in issuable finder

Created by: cirosantilli

This reimplements abilities logic.

DRYed it up.

Tests will fail before the following dependency is met:

• https://github.com/gitlabhq/gitlabhq/pull/8091