BUG again, add missing $allowed_actions