Fix #1963 "FB user sees all forms in summary page if role is not found"

- there was no distinction between "no roles configured" and "no role applies"
- also detail page was not checking roles properly, for `new` as well as other modes