add check for xcom permission when result is specified in query parameter (#6441

https://github.com/apache/airflow/commit/35ca494ace6ec7d4962c27f5fd7137097934c0b1