Limited access, whitelisted customer actions, updated test_helper