Access check in Response

Add is_writer, is_reader, is_visible_for_all to API response for uploads so the GUI does not have to replicate the logic.