Permissions and scope work more reliably.

Fixed: A person needs the right access and context before getting on with service. We fixed issues affecting validation, location scope, and roles so the app handles those everyday checks more reliably.