Permissions for /booktree per roll

Problem/Motivation

not all users are allowed to see book titles/pages
there are permissions on node level
but /booktree shows all book titles to all users

Steps to reproduce

Proposed resolution

Permissions for /booktree per roll

Remaining tasks

User interface changes

API changes

Data model changes