use :read permission on render_field so it can be used on custom actions with records not allowed to update, action won't change record