Correct js paths
Add allowed actions
Merge branch 'allowed-actions'