Seven separate permissions
Read forms, change forms, read submissions, PDF templates, publish, read the plan, change the plan. "Read submissions" is deliberately not part of "read forms": a submission contains text other people wrote. Whoever reads it should not be allowed to change things in the same breath.