Added allowed_action for the product API handler
Fixed sort order