Allow users without system-wide roles but with role assignments in
programs to read Role and Person resources. Fix the rendering of
programs in trees so that the is_program argument is correctly set.