Added client side action level/role authorization