NOJIRA add support for specifying access status-based privs in roles; used in Pawtucket to determine if records show or not.