Add test suite for read-only functions

This makes sure that a read-only user can execute read-only functions
and is not allowed to execute read-write functions.

It relies on pynipap, so certain backend functions, like those related
to ASNs, are not tested as pynipap doesn't yet offer mappings for those
functions.

Part of #438.