API permission. Added API.has_permission() to check if a CRUD operation is permitted on a content type. This function is always used by the API to reject some calls. At the moment it gives Read to everything and CUD only if settings.REJECT_HTTP_API_REQUESTS = False.