Could you double check all of these permissions and that they correspond to actions that exist on the controller indicated? There are quite a few missing actions and actions covered that don't exist.