Fixes #5503/BZ1102315 - restrict UI interactions to actual permissions.

http://projects.theforeman.org/issues/5503
https://bugzilla.redhat.com/show_bug.cgi?id=1102315
Yeah, I thought we ought to keep it flexible for adding authentication code in the future.  Although the argument could be made that we should rename it when we actually do that.