cmis: getAllowableActions: handle admin actions