Add support for ?permission=update parameter in API

This allow to get a list of items on which we have the specified
permission. It is available on all API.

/api/questionnaire?permission=read   => all readable questionnaires
/api/questionnaire?permission=update => all updatable questionnaires