Description of problem:
unable to order unless the permissions to edit a dialog are granted

Version-Release number of selected component (if applicable):
5.8.0

How reproducible:
all the time

Steps to Reproduce:
1. set up a catalog item & dialog form 
2. create a user who has access to the catalog item, based on vm_user + catalog access
3. order the catalog

Actual results:
 URL https://sample.cloudforms.com/api/service_dialogs/42000000000005?resource_action_id=42000000000086&target_id=42000000000003&target_type=service_template

Status 403 Forbidden

Content-Type application/json; charset=utf-8

Data {"error":{"kind":"forbidden","message":"Use of the read action is forbidden","klass":"Api::ForbiddenError"}} 

Expected results:
able to see the dialog and order it

Additional info:
the only way to be able to order is to be able to customize the dialog (automation > automate > customization) which gives too many permissions.