Reminder for next time... If it breaks on production, it should have broken on staging.
This might already be working, this task is just a note to verify and fix if necessary.
Note that replication settings play into permissions. Set up identical replication to a trash heap somewhere, if necessary to get the right goggle lighting.