Implements new Configuration API

closes #3619
- adds new permissions for configuration API
- adds integration tests
- adds configuration API for reading allowed values
Merge pull request #3841 from halfdan/3619-configuration-api

Implements new Configuration API