Wasn't exactly sure what to title this,
See the attached screencast,
Basically, a bunch of the actions for the task are disabled, some lead to silent 404's (via ajax), some still look like they work, and some lead to visible 404's.
None of these things should happen, it should show the denied by policy dialog.
This is all on this install (secure) on 12/8/2015