hide links
assigning permissions