non admin user: form_actions