Thank you for the fast response, @jzelinskie ! That api would definetly help a lot!
Yeah, I'm currently considering having them hardcoded in my application for now, but it seems a bit smelly. I would have to send a ton of parallel "check" requests in order to list the user permissions...