Enforce view permissions on action list