Fix security vulnerability where the actionFullView does not do permission
checking. This allows a user without the relevant permissions to view the
file.