Separate out publish_action permissions