Filter on permissions in Collections API (bug 915793)

r? @mattbasta @diox