#9504: Action - Staff with no permission still can access record via URL

When staff's override permission is removed prior closing action or removing the staff from who to action field, staff will not able to access the record via URL anymore