adding custom actions to action_permission checks (Closes #146)