John just created a new paradigm by which privilege restrictions to list actions are separated by object-lifecycle restrictions to list actions, which we should all use moving forward:
https://github.com/xtuple/xtuple/pull/1225