Role-based permissions in the mobile web app

Even a read-only version would unblock us. Our response times would improve without adding headcount.