Test all permissions and roles

[solidgoldpig]

As noted in #804 it is difficult anyone to see what permissions exist within the app at any given time and what those permissions allow users to do.

When we have documented the permissions properly, we should have equivalent functional tests that confirm that documentation and reality coincide (ideally driven by said documentation?)

eg. #824 (comment)