Steps to reproduce

1.  Go to https://demo.magnolia-cms.com/.magnolia/admincentral#app:security:roles;/travel-demo-tour-editor:treeview:
2.  Change permission of 'Tours' workspace to "Read-only"
3. Log out and log in as "eric"
4. Open Tours App
5. Select any Tour
6. Notice "edit style actions" are all enabled (which is wrong)
7. Try to delete it

Expected results

Delete action (and others) are disabled as delete permission are missing (no access denied error message)

Actual results

Actions are enabled. Errors when trying to use them.

Workaround

Development notes

In our Project, we have our own custom app (not Tours app). The delete action has writePermissionRequired set to true but this bug still occurs.