Different staff roles should see different levels of data.

If someone asks for data they are not allowed to see, the system should clearly tell them they don’t have access.