Return messages describing why the action is disallowed, or an empty array if it is allowed.