Restrict anonymous user capabilities (#2156)

internal/types/action/action.go

@@ -53,6 +53,10 @@ const (
 	AddHostSources            Type = 42
 	SetHostSources            Type = 43
 	RemoveHostSources         Type = 44
+
+	// When adding new actions, be sure to update:
+	//
+	// * The Test_AnonRestrictions test
 )
 
 var Map = map[string]Type{

internal/types/resource/resource.go

@@ -30,6 +30,7 @@ const (
 	// * The Grant.validateType function and test
 	// * The perms.topLevelTypes function
 	// * The scopes service collection actions for appropriate scopes
+	// * The Test_AnonRestrictions test
 )
 
 func (r Type) MarshalJSON() ([]byte, error) {