Adds API endpoint to retrieve operator permissions for the current user (bug 1074357).

r? @robhudson @diox @ngokevin 
Need CORS stuff?