permission check and breadcrumb