Protect undemote method with permission check

Undemoting goes through a separate code path as the rest of the
CP2 queries/updates, so we need to do a permission check for the
WRITE_CONTACTS permission

Change-Id: I547270376c55f6ff311d5712eef8a6b0b923eee8
1 file changed