return a permissions list for the current user with content

Needed to control access to Aloha or Publish button in webview