This is still wrong semantically. You're moving rights checking logic outside the rights module. Although it's not the first rights check that's done inside actions, this doesn't mean we should continue doing this.

And my comment still stands: users will see the "Add page" button, click on it, and see an error ("you're not allowed"). This is a false positive: the UI says I can do something, but trying to do that fails.