displaying only authorized actions