Use permissions to determine what actions to make available on an operation