[Feature] UI rendering of effective permissions against applied permissions

[fmigneault]

When applied permissions are set on the User Edit page, the checkboxes could display effective permissions of all resources.
Because the number of resources can be quite big, it is not efficient to resolve effective permissions one-by-one for rendering on the page.

Instead, there should be another function (similar to the ServiceInterface.effecive_permissions method), that maintains the resolved state of all resources encountered along the way, from all bottom resources to all top services for the given service-type.

Probably the solution should be used also for #341 which would then offer the same details via new API routes.

Relates to #341
Originates from #353