fixes #4597 - map host disassociate actions to permission