Function refresh_control_action_availability 

pub fn refresh_control_action_availability(
    widget: &mut dyn Widget,
    allowed: &HashSet<ActionAddress>,
)

Push the permission-filtered action surface into every control under widget.