The <OPENvpms-Home>import\data\roles.xml file contains an error.  It has:

     <!-- Contact Authorities -->
    <data id="CCONTAC" archetype="security.archetypeAuthority" name="Contacts Create" description="Authority to Create Contacts"
        serviceName="archetypeService" method="create" archetypeShortName="contact.*" />
    <data id="SCONTAC" archetype="security.archetypeAuthority" name="Contacts Save" description="Authority to Save Contacts"
        serviceName="archetypeService" method="save" archetypeShortName="contacts.*" />
    <data id="RCONTAC" archetype="security.archetypeAuthority" name="Contacts Remove" description="Authority to Remove Contacts"
        serviceName="archetypeService" method="remove" archetypeShortName="contact.*" /> 

Note the "contacts.*" in line 5 above - this should be "contact.*"

The effect is to prevent users who have the authority Contacts Save from actually saving any contacts.

Regards, Tim