Accessible data versus allowed actions in app permission review