Wrong access check when creating a non-product node type product

Currently it's impossible to allow users without 'administer products' permission to create products for node types other than 'product'.

This is due to product_form_alter() checking only for 'administer products' permission while it should call product_access() to do a complete check.

Attached patch fixes this.