Added sources filtering for annotation browsing. Taken care of no permissions specified in the filter. Optimized query for multiple tgtUrls (currently unused).