Task #1298: project-scoped relation write rights, XSS, legacy gates (cherry picked from commit 5de39abf65296f5ab231b2b5bc5829808acd45cf)
docs(1298): Requirement Viewer relations management restored