Fix precedence for access rights.
Extend read spec for farms for all roles.
Add API test for a reading a single farm.