UK: add can_view_xform permission to manager and owner roles