Rules Integration makes innacurate access assumptions

By default, operation_types/base.class.php sets getAccessMask to VBO_ACCESS_OP_UPDATE, a sensible assumption. However, rules_component should override this and make no assumptions about what permissions a rule component requires, since Rules both already contains its own permission system and because rules which don't update a piece of content are entirely possible.

No patch here, but the proposed change is simple enough - add

public function getAccessMask() {
    return VBO_ACCESS_OP_VIEW;
  }

to rules_component.class.php.