BUG add $allowed_actions for both DMSDocumentAddController and DMSUploadField