For proposed return value see epic: EZP-23738

TBD: Do some decoupling while adding reverse lookup API for permissions.
see parts regarding moving persmisisons to own sercvice in https://github.com/ezsystems/ezpublish-kernel/compare/repo_structure (to avoid introducing root Repo interface api's if not needed down the road).