Fixes #5503/BZ1102315 - restrict UI interactions to actual permissions.

http://projects.theforeman.org/issues/5503
https://bugzilla.redhat.com/show_bug.cgi?id=1102315
Can you not just call `User.current.permissions` as well? There seems to be a relationship between the two in the AR file.