Change AbstractAction to ActionProxy. 
Use this proxy to control the action privilege.