Since any de/activation request actually attempts to write to involved node/s, to update its metadata, the actions should be implicitly allowed only for users having write permissions to them. Since MGNLUI-2510 it's trivial to restore this former 4.5 like behaviour. Thes to any actions resulting in write events.