more access checking for sidebar