execute actions allowed for sandboxed users