Nejc's https://github.com/collective/collective.impersonate has been so useful for debugging permission/role/security issues even on live sites.
I've added a page of user documentation and screenshots, along with a personal menu item that takes a Manager to the @@impersonate
form.