hide access right and add validate js