actions is a serialized indexed array with zero or more actions, so it should contain
serialize(array('read'))
Just tested it here, and tested a user with a Super Admin role, and I get full access? Does this user have a permission assigned with a 'D' filter (which will block the 'A' filter)?