ActionFinish in the API

Last mile of the ActionFinish function to the API
might be worth extracting into an IsErrPerm helper, I bet we do this a million times across the tests