In views, hide actions that are forbidden to ROLE_USER
Fixes #17