Implements new Configuration API

closes #3619
- adds new permissions for configuration API
- adds integration tests
- adds configuration API for reading allowed values