WIP records: REST API addition

I think there is no other way to check if a user has the right to view a record.
I can ask Esteban.