chore(rest): filter NONE and ALL permission names on authorizations

- we now distinct between the ALL permission in the backend and
  the ALL permission in the frontend

backend:
  - ALL granted means that all possible permissions are granted
  - ALL revoked means that at least on permission is revoked

frontend:
  - ALL granted means that all possible permissions are granted
  - ALL revoked means that all possible permissions are revoked

- NONE is always filtered cause it is always granted and has no
  useful meaning for the front end

- this leads to following permission names lists:

1. ALL granted in backend => [ "ALL" ] in frontend
2. ALL revoked in backend => [ "ALL" ] in frontend
3. READ, UPDATE revoked in backend => [ "READ", "UPDATE" ] in frontend

related to #CAM-2768