Apply user permissions in data source exploration

Data source endpoints (table preview, row count, schema) now enforce user permission filters; closes a hole where users could preview all rows they weren't authorized to see.