Make 'Forms' permissions more granular

This is definitely needed for bigger customers.