Some user privileges API changes

Instead of the internally used, meaningless numbers, use strings for indicating user privileges. Also, allow filtering the user list by them.