With Nuxeo 7.4, it is now super easy: https://doc.nuxeo.com/x/BI_RAQ

Hello,

You can make it in a custom plugin. You must have a custom action-contrib.xml to override your action. For example i overrided quota action as follow:

<action id="TAB_QUOTA" link="/incl/tabs/document_quota.xhtml"
  order="400" label="action.view.quota" icon="/icons/file.gif"
  accessKey="q">
  <category>VIEW_ACTION_LIST</category>
  <filter-id>QUOTA_MANAGABLE_DOCTYPES</filter-id>
  <filter id="QUOTA_MANAGABLE_DOCTYPES_has_subtabs">
    <rule grant="true">
      <condition>#{userSession.administrator}</condition>
    </rule>
  </filter>
</action>

You can specify yours access conditions.

Hope its help you.