hide menu if user is not allowed