Change perms check so RO users can use addSub and addLic actions