The current implementation for developers to test user rights is difficult to use, and not flexible. A way is needed to choose which rights to test, "à la carte", for the testing in the application to make sense.
A first step would be to define the requirements better.