Add a rights property on ElementSerializer

Closes #848 (closed)

I did not add the manageable at all because it would just make no sense for the frontend, or maybe we would need something much more specific like a can_admin or deletable. rights just does the job more consistently since it already exists on a corpus.