useractions view requires only zope2.View permission