Change Actions permissions

[berleant]

In discussion with PM, turns out we had mis-written the original requirement. Actions should be collectives-only.

Acceptance criteria

• [x] The "Actions" subcategories should be viewable only by collective members