restrict tab availability to specific roles