Permissions diagnostics

Check access

Pick an organization and a user, then run the check. This resolves every server-side role predicate used by RLS.