Added external controller method for privileges.

Gets all assigned (organization) privileges for a given person and
organization, returns them in a JSON object.