Get mappings by policy Id, just the policy, not the mask
1 endpoint to update or create visa permissions, 1 visa - many permissions.
each visa should only have 1 entry per policy, example: SONG. READ, if the request is to update to SONG.WRITE, then update it to be SONG.WRITE, do not keep both.
1 endpoint to remove mappings by VISA id AND policy name(or ID? as long as it's consistent with the rest of the API). 1 visa - many policies.
Detailed Description
Implement endpoints:
All endpoints: