Fix ProtectedBranch access level validations
CE port of https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/3542
Moves a validation so it doesn't always run on EE
CE port of https://gitlab.com/gitlab-org/gitlab-ee/merge_requests/3542
Moves a validation so it doesn't always run on EE