Fix is_allowed_for, add FIXME comments for pending work in the next
sprint.
Merge pull request #673 from reciprocity/feature/urgent-permissions-fix

61711794 Fix is_allowed_for permission checks.