Permissions and GET /:resource should accept functions

[mtimofiiv]

This will help with searching "through" to association data, and also allow "through" associations to permissions.

Also will make map + reduce functionality possible.