restapi: if filter: header is set, use query instead of search (#869334)

When the filter option is specified the api query should not
throw a insufficient permissions exception. Instead the query should
return a list of objects that the user has permissions for.

Change-Id: I0051d10458fe85cf6660f09ce4efca1aa7c2d952
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=869334
Signed-off-by: Ravi Nori <rnori@redhat.com>