Add a new route returning permissions
We need a new API route returning what the user can and cannot do. There's no need to expose the specific permission nodes, some simplified version will work too. The frontend will then use this route to print some modals / info boxes about what it can be done.