JARVIS-338 JARVIS-359 added action level permissions