Only create urls for allowed actions

Change-Id: I3db5c2b2060a95ab585ce8ba8f44eab3c9bdfea5
Merge "Only create urls for allowed actions" into frontend-rewrite