Issue #948: Remove ManageClients permission for Owner role (Client Contacts)

Some Client fields are protected by ManageClients permission, so it is silly
to allow Client Contacts this permission.  All relevant permission checks must
be replaced with standard add/view/modify permissions.