Add permission checks to whitelisted methods and the DocPerm rows they need

Backports six permission-checking fixes to v15-hotfix. Whitelisted methods on several doctypes now validate user rights before executing, preventing unauthorized access to doctypes like Material Request, Stock Entry, and others.