What debug possiblies do I have to see where a request gets rejected?

It really depend on the collection types that you need to give access to. Most of this can be done from the admin panel.