Update extras API to return canPublish using document_acl table

Close #253
Merge pull request #258 from Connexions/publish-permission

Update extras API to return canPublish using document_acl table