or you could show all of the actions and then just show a permission denied (and a resolution?) when the user tries to do something they're not allowed