Fix missing permissions and update the documentation

fixes #12483

doc/12-icinga2-api.md

@@ -203,13 +203,16 @@ Available permissions for specific URL endpoints:
   actions/<action>        | /v1/actions   | Yes
   config/query                  | /v1/config    | No
   config/modify                 | /v1/config    | No
+  console                       | /v1/console   | No
+  events/<type>           | /v1/events    | No
   objects/query/<type>    | /v1/objects   | Yes
   objects/create/<type>   | /v1/objects   | No
   objects/modify/<type>   | /v1/objects   | Yes
   objects/delete/<type>   | /v1/objects   | Yes
   status/query                  | /v1/status    | Yes
-  events/<type>           | /v1/events    | No
-  console                       | /v1/console   | No
+  templates/<type>        | /v1/templates | Yes
+  types                         | /v1/types     | Yes
+  variables                     | /v1/variables | Yes
 
 The required actions or types can be replaced by using a wildcard match ("\*").
 

lib/remote/typequeryhandler.cpp

@@ -74,6 +74,7 @@ bool TypeQueryHandler::HandleRequest(const ApiUser::Ptr& user, HttpRequest& requ
 
 	QueryDescription qd;
 	qd.Types.insert("Type");
+	qd.Permission = "types";
 	qd.Provider = new TypeTargetProvider();
 
 	if (params->Contains("type"))

lib/remote/variablequeryhandler.cpp

@@ -83,6 +83,7 @@ bool VariableQueryHandler::HandleRequest(const ApiUser::Ptr& user, HttpRequest&
 
 	QueryDescription qd;
 	qd.Types.insert("Variable");
+	qd.Permission = "variables";
 	qd.Provider = new VariableTargetProvider();
 
 	params->Set("type", "Variable");