Action-based permission handling