rest-api: add viewsets and permissions to packages

Signed-off-by: Gregory Meno <gmeno@redhat.com>

@dmick