implemented #allow_action, #allow_param, #allow_all, #allow_action?, #allow_param? in PermissionServiceAdditions