[#50560835] correct some of the permissions checking, and add code to
allow us to check permissions in the service code (not just in
annotations/jsp). Move over to using enums since the vaues are baked
into the code, and it will pick up badly named applications or access
levels