…oved sources

This risks being a bit too blunt and some functionality might stop working for some of the removed parts. 
In these cases, we'll have to add these parts back one by one
without a * permission, and test. So far, this has been mainly tested for cohortdefinition and conceptsets.
Anyway, I judged this better than having too broad permissions and resulting security incidents.

Fix: add missing read permissions to PermissionSchema classes

Fix: remove all * permissions from role 15