(TBD) Enforcement in the instructor v1 API #493

⚠️ Pending validation with Product.

Description

Apply the same permissions to the v1 endpoints (lms/djangoapps/instructor/views/api.py) equivalent to those in #487, #488, #489, #490, #491 and #492, so permissions can't be bypassed by calling the old API.

Acceptance criteria

• The PR includes a v1 endpoint ↔ permission mapping table.
• The common criteria from Backend permission enforcement (LMS) #485 are met.

Blocked by: #486 and Product's decision