Students who don't have permissions to view roster can't see their own memberships through /direct/

Requests to /direct/membership without any search parameters (eg memberships for the current user) should return all a users' memberships. If the user doesn't have permission to view the roster they weren't seeing their membership which is a bug.