jaxrs: add endpoint to retrieve RBAC permissions

This commit also enforces RBAC in the server tests. All calls are now made as
an admin user (who has all permissions).

Signed-off-by: Pierre-Alexandre Meyer <pierre@mouraf.org>