Updated the content display model to pass in a list of the allowed actions (using the letter of the permission). We then dynamically generate the action buttons on the content editor based on what the user is actually allowed to do and the current state of the content. Fixed up some content saving validation for Create + Publish at the same time, since we never allowed that behavior before we now have to check for both permissions during this one execution. Updated the Unpublish method to check for publish permissions - unpublish is an action but it is not permission assignable, you can only unpublish if you can publish. Fixes the user session timeout display timer.

src/Umbraco.Web/Models/ContentEditing/ContentItemDisplay.cs

@@ -1,4 +1,5 @@
 using System;
+using System.Collections.Generic;
 using System.Linq;
 using System.Runtime.Serialization;
 using System.Web.Http;
@@ -28,6 +29,14 @@ namespace Umbraco.Web.Models.ContentEditing
 
         [DataMember(Name = "urls")]
         public string[] Urls { get; set; }
-        
+
+        /// <summary>
+        /// The allowed 'actions' based on the user's permissions - Create, Update, Publish, Send to publish
+        /// </summary>
+        /// <remarks>
+        /// Each char represents a button which we can then map on the front-end to the correct actions
+        /// </remarks>
+        [DataMember(Name = "allowedActions")]
+        public IEnumerable<char> AllowedActions { get; set; }
     }
 }