Added AllowedActions model that dictates based on UserGroup, or directly to User, what actions can be performed.