Bug 1061510 - Make settings api always check principals for permissions; r=bent

--HG--
extra : rebase_source : ece6c6808f391f5dd0661cb3c7acbc942d8bb4ac